AI Security Operations Lead (AI SecOps Lead)

Position Overview

We are seeking an experienced AI SecOps & Detection Lead to build and operate the organization's AI security lifecycle. This role focuses on three critical objectives:

• Establish complete visibility into AI tools and workloads across the enterprise.
• Build effective detection, response, and recovery capabilities for AI-related incidents.
• Continuously feed lessons learned from incidents and discoveries back into preventative security controls.

The ideal candidate will integrate AI security operations within existing SOC processes, ensuring AI-related threats are detected, investigated, and remediated alongside traditional security events.

This role works closely with Security Operations, Engineering, Compliance, and Security Leadership teams to deliver a scalable and auditable AI security program.

Key Responsibilities

AI Security Operations & Detection

• Integrate AI-specific alerts and findings from tools such as Wiz and AIM into existing SOC workflows.
• Ensure AI security events are triaged, investigated, and responded to through standard security operations processes.
• Develop AI-focused detection logic and monitoring strategies.

Shadow AI Discovery

• Design and implement automated discovery mechanisms to identify unauthorized or unapproved AI tools.
• Maintain visibility across cloud and on-premises environments.
• Establish telemetry-based monitoring for AI applications, models, and integrations.

Incident Response & Readiness

• Develop AI-specific incident response playbooks.
• Conduct tabletop exercises and readiness assessments.
• Lead incident triage, containment, remediation, and root cause analysis for AI-related security events.

Prevention & Risk Reduction

• Translate incident findings and discovery insights into actionable remediation efforts.
• Partner with engineering and security teams to strengthen preventive controls.
• Continuously enhance the organization's AI security posture.

Governance & Compliance

• Maintain AI tool inventories and risk assessments.
• Support audit readiness through documentation and governance activities.
• Ensure security processes align with enterprise compliance requirements.

Required Skills

Security Operations (SecOps)

• Strong hands-on experience with:
  • SIEM platforms
  • SOAR solutions
  • Detection engineering
  • Alert triage
  • Incident response

AI Security Expertise

• Strong understanding of AI-specific attack vectors including:
  • Prompt Injection
  • Model Poisoning
  • Data Exfiltration
  • Agent Credential Abuse
• Ability to convert AI threats into actionable detection use cases.

Asset Discovery & Visibility

• Experience building enterprise asset discovery programs.
• Ability to establish visibility into AI applications, workloads, and integrations across cloud and on-prem environments.

Workflow Integration

• Experience integrating specialized security tooling into existing SOC operations.
• Ability to avoid siloed workflows and create unified detection processes.

Risk & Metrics Management

• Experience measuring detection effectiveness and identifying coverage gaps.
• Ability to communicate risk posture and trends to leadership stakeholders.

Technical Requirements

• Enterprise Security Operations experience
• SIEM/SOAR Platform Expertise
• Detection Engineering
• Incident Response
• AWS Security
• Cloud Security Monitoring
• Telemetry Analysis
• Asset Discovery
• Security Governance
• Risk Assessment
• AI Security Operations
• Security Documentation & Compliance

Preferred Qualifications

• Experience with Wiz, AIM, or similar AI security tooling.
• Experience managing visibility across hybrid cloud environments.
• Strong understanding of AI governance frameworks.
• Experience driving enterprise-wide security initiatives.
• Ability to influence cross-functional teams without direct authority.

Core Competencies

• Cross-Functional Collaboration
• Security Leadership
• Threat Detection & Response
• AI Risk Management
• Process Optimization
• Strategic Security Planning
• Continuous Improvement
• Executive Communication

Success Metrics

• Increased visibility into AI tools and workloads.
• Effective integration of AI alerts into standard SOC operations.
• Reduced response time for AI-related incidents.
• Improved AI security control coverage.
• Accurate and auditable AI inventory and risk management program.
• Strong partnership across Security, Engineering, Compliance, and Leadership teams.