AI Runtime & Trust Security Advisor II

Calling all innovators - find your future at Fiserv.

Were Fiserv a global leader in Fintech and payments and we move money and information in a way that moves the world. We connect financial institutions corporations merchants and consumers to one another millions of times a day - quickly reliably and securely. Any time you swipe your credit card pay through a mobile app or withdraw money from the bank were involved. If you want to make an impact on a global scale come make a difference at Fiserv.

Job Title

About your role

The AI Runtime & Trust Security Advisor II helps lead the security of AI in production both what deployed AI does and what it is allowed to do detecting AI-specific threats such as prompt injection jailbreaks and inference-time data exfiltration while helping govern identity authorization and secrets for AI systems and agents. The role leverages AI protection tooling along with building detection in-house: commercial AI observability and guardrail platforms (e.g. Arize Fiddler) data security posture management for AI (e.g. Varonis) and the enterprise SIEM/SOAR IAM and secrets stack. Sitting within Cybersecurity this role helps lead a cross-functional model that connects Cybers services with the SOC IAM Data Governance and platform teams as Fiserv scales AI in production.

What youll do

• Lead operationalizing runtime monitoring guardrails and model-integrity checks for production AI workloads using commercial AI observability and guardrail platforms detecting prompt injection jailbreaks model abuse drift and anomalous inference and tuning thresholds and alert quality.
• Serve as the primary SOC liaison for AI security events providing platform context triage support and expertise on AI-specific attack patterns general SOC analysts may not recognize and help maintain AI-specific incident response playbooks.
• Help lead the enterprise authorization model for agentic AI partnering with IAM and the AI Center of Excellence to define what agents may do on behalf of whom with what tool scope and duration and help extend the identity fabric to AI agents as first-class principals (workload identity standards such as SPIFFE/SPIRE OIDC).
• Operate identity anomaly detection and policy enforcement for AI workloads and agents adjudicating scope violations and out-of-scope tool calls.
• Help lead data security posture for AI in partnership with Data Governance operating DSPM tooling (e.g. Varonis Cyera or equivalent) to detect and reduce over-permissioned data exposure to copilots and agents and responding to AI data-exposure findings.
• Partner with the Cloud and platform teams to define and operate secrets hygiene and network egress controls for AI workloads particularly agent tool-call boundaries and model API access.
• Adjudicate novel authorization requests and escalations that require human judgment on risk tolerance and lay the groundwork for a future automation layer as the program matures.
• Responsibilities listed are not intended to be all-inclusive and may be modified as necessary.

Experience youll need to have

• 7 years in security engineering spanning at least two of: AI/ML runtime security security operations and detection engineering and identity / trust engineering.
• Hands-on familiarity with AI attack patterns: prompt injection jailbreaks model inversion and inference-time data exfiltration.
• Experience operating commercial AI observability and/or guardrail platforms (Arize Fiddler or equivalent) and SIEM/SOAR (Splunk Microsoft Sentinel Chronicle or equivalent).
• Direct experience securing non-human and service identities including workload identity standards (SPIFFE/SPIRE OIDC) and authorization policy engines (Open Policy Agent Cedar).
• Working knowledge of data security posture management (Varonis Cyera BigID or equivalent) and secrets management (HashiCorp Vault AWS Secrets Manager Azure Key Vault).
• Comfort partnering across the SOC IAM Data Governance and platform teams leading shared outcomes through influence.
• Bachelors degree in Computer Science Cybersecurity or a related field and/or equivalent work experience.

Experience that would be great to have

• Experience in financial services or other regulated industries with AI-specific compliance privileged access management or non-human identity governance at scale.
• Hands-on experience with LLM red teaming or adversarial ML testing.
• Experience designing authorization models for multi-agent AI systems delegation chains capability scoping and time-bounded access grants.
• Certification in CISSP CISM CCSP or equivalent; security operations or IAM certifications.
• Familiarity with AI network egress controls (tool-call boundaries model API access) and zero trust applied to machine identities.

How youll work

This role is on-site Monday through Friday. Fiserv considers in-person collaboration to be an essential part of this role as in-person office experiences help you with your overall onboarding experience and leads to stronger productivity.

Travel

Approximately 10% travel off-site or to other office locations is expected.

Sponsorship

You must currently possess valid and unrestricted U.S. work authorization to be considered for this role. Individuals with temporary visas including but not limited to F-1 (OPT CPT STEM) H-1B H-2 or TN or any candidate requiring sponsorship now or in the future will not be considered.

#LI-RM1

Salary Range

These pay ranges apply to employees in New Jersey and New York. Pay ranges for employees in other states may differ.

It is unlawful to discriminate against a prospective employee due to the individuals status as a veteran.

Thank you for considering employment with Fiserv. Please:

• Apply using your legal name
• Complete the step-by-step profile and attach your resume (either is acceptable both are preferable).

Our commitment to Equal Opportunity:

Fiserv is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion national origin gender gender identity sexual orientation age disability protected veteran status or any other category protected by law.

If you have a disability and require a reasonable accommodation in completing a job application or otherwise participating in the overall hiring process please contact. Please note our AskHR representatives do not have visibility to your application status. Current associates who require a workplace accommodation should refer to Fiservs Disability Accommodation Policy for additional information.

Note to agencies:

Fiserv does not accept resume submissions from agencies outside of existing do not send resumes to Fiserv associates. Fiserv is not responsible for any fees associated with unsolicited resume submissions.

Warning about fake job posts:

Please be aware of fraudulent job postings that are not affiliated with Fiserv. Fraudulent job postings may be used by cyber criminals to target your personally identifiable information and/or to steal money or financial information. Any communications from a Fiserv representative will come from a legitimate Fiserv email address.