Dereck Davis Senior AI Security Engineer (Artificial Intelligence Security Posture Management (AiSPM)

The position is described below. If you want to apply click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application youll be invited to create a profile which will let you see your application status and any communications. If you already have a profile with us you can log in to check status.

Need Help

If you have a disability and need assistance with the application you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries wont receive a response).

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)

***This role is 5 days a week in the Atlanta or Charlotte Office***

The Artificial Intelligence Security Posture Management (AiSPM) function supports two core areas: Shadow Artificial Intelligence (Shadow AI) risk reduction and AI Security Review/Governance for enterprise AI use cases.

This Senior AI Security Engineer will help identify evaluate document and reduce AI-related security risk across approved emerging and unapproved AI usage patterns.

The role uses security and governance tooling such as CrowdStrike Wiz Zscaler and supporting enterprise workflows to analyze AI exposure validate ownership support remediation and maintain repeatable review evidence.

Strong candidates will understand cloud security software security data protection security governance and enterprise risk management with the ability to translate technical AI risks into clear actions for engineering security and .

ESSENTIAL DUTIES AND RESPONSIBILITIES

Following is a summary of the essential functions for this job. Other duties may be performed both major and minor which are not mentioned below. Specific activities may change from time to time.

• Supports the Artificial Intelligence Security Posture Management function by identifying evaluating documenting and reducing security risk associated with enterprise AI usage.

• Investigates Shadow Artificial Intelligence observations from tools such as CrowdStrike Wiz and Zscaler validating usage context ownership business purpose and potential exposure.

• Performs AI Security Reviews for proposed or existing AI use cases reviewing intake details data sensitivity model or service interactions control coverage and residual risk.

• Partners with application infrastructure business and security teams to confirm AI asset ownership assess risk identify required controls and track remediation or governance outcomes.

• Documents review evidence risk gaps action items and decision rationale in a clear repeatable and audit-ready manner aligned to established security guidance and governance processes.

• Analyzes telemetry alerts inventories and workflow records to identify trends in AI usage prioritize risk reduction and support executive or operational reporting.

• Contributes to the development and refinement of AI security review procedures intake checklists escalation paths knowledge articles and operational playbooks.

• Supports escalation of higher-risk AI observations to appropriate security partners including Security Operations Center teams incident response partners and risk or governance stakeholders when warranted.

• Communicates technical and governance findings in plain language helping stakeholders understand AI risk required controls remediation expectations and approval dependencies.

• Maintains awareness of emerging AI security risks detection methods governance practices and tooling capabilities to improve the effectiveness of the AiSPM program over time.

Required Qualifications
The requirements listed below are representative of the knowledge skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelors degree or equivalent education training and work-related experience.

• Minimum of 7 years of experience in security engineering or related cybersecurity roles.

• Deep specialized knowledge in cybersecurity principles theories and concepts.

• Proven experience in software development lifecycle security practices.

• Deep knowledge of threat modeling security testing and penetration testing.

• Experience implementing and managing complex information security technologies.

Preferred Qualifications

• Working knowledge of AI security cloud security data protection and governance frameworks including:

  • National Institute of Standards and Technology Artificial Intelligence Risk Management Framework (NIST AI RMF)

  • National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53)

  • Open Worldwide Application Security Project Machine Learning Top 10 (OWASP ML Top 10)

  • Open Worldwide Application Security Project Large Language Model Top 10 (OWASP LLM Top 10)

  • Federal Financial Institutions Examination Council (FFIEC) guidance applicable to regulated financial services environments

  • Cloud Security Alliance guidance related to AI cloud and third-party technology risk

• Experience reviewing AI use cases machine learning services large language model applications or AI-enabled business workflows for security privacy governance or compliance risks.

• Experience using CrowdStrike Wiz Zscaler or similar security tools to investigate endpoint cloud network software or SaaS-related risk signals.

• Experience with security review risk assessment exception management evidence validation or control mapping in a regulated enterprise environment.

• Proficiency or familiarity with Python PowerShell Structured Query Language (SQL) or similar scripting and analysis methods used to normalize data support investigations and improve repeatable reporting.

• Relevant security certifications such as Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) Security or similar credentials.

• Experience in financial services cybersecurity regulated enterprise environments or platforms with high audit and control requirements.

• Familiarity with secure tool-calling patterns application programming interface (API) protections model or prompt change validation and runtime traceability for AI systems.

• Working knowledge of cloud-native security patterns telemetry analysis governance workflows and deployment gating for modern engineering teams.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits though eligibility for specific benefits may be determined by the division of Truist offering the offers medical dental vision life insurance disability accidental death and dismemberment tax-preferred savings accounts and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment along with 10 sick days (also prorated) and paid holidays. For more details on Truists generous benefit plans please visit our Benefits site. Depending on the position and division this job may also be eligible for Truists defined benefit pension plan restricted stock units and/or a deferred compensation plan. As you advance through the hiring process you will also learn more about the specific benefits available for any non-temporary position for which you apply based on full-time or part-time status position and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race gender color religion citizenship or national origin age sexual orientation gender identity disability veteran status or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work