Enterprise AI Security Advisor

Eli Lilly and Company  ยท  via Remote Communications Jobs
๐Ÿ’ฐ $129,000 - $253,000/yr ๐ŸŒŽ Remote

Job Description:

  • Establish and own a companywide approach to securing AI agents, models, applications, and supporting infrastructure
  • Maintain a prioritized view of AI security risk and set priorities for teams and partners
  • Own the roadmap for AI security controls, tooling, and improvements; report measurable outcomes to leadership
  • Advise senior leaders on emerging AI threats and security-productivity trade-offs
  • Define security requirements and approved patterns for AI systems, including identity, permissions, data boundaries, approvals, kill switches, logging, monitoring, and incident response
  • Publish reference architectures and acceptance criteria for AI applications, agents, and integrations
  • Set control expectations for inference-time guardrails, AI gateways, and model and agent registries
  • Integrate AI security requirements into architecture review, risk acceptance, and change management processes
  • Assess internally built AI systems and third-party AI products
  • Lead testing for prompt injection, sensitive-data exposure, excessive permissions, unsafe agent actions, jailbreaks, and misuse scenarios
  • Define evidence required before controls move from monitoring to blocking
  • Maintain threat models using OWASP Top 10 for LLM Applications and MITRE ATLAS
  • Evaluate, select, and tune cloud, endpoint, identity, data protection, and AI-specific security tools
  • Establish visibility into AI usage and agent activity across the enterprise
  • Lead enterprise AI guardrail services, including detection content, policy tuning, telemetry, dashboards, and integrations with SIEM, SOAR, EDR, identity, and ticketing platforms
  • Define detection, alerting, and incident response playbooks for AI-specific events
  • Partner with AI application and agent teams to incorporate security into design, build, and deployment
  • Collaborate with privacy, legal, compliance, quality, and AI governance functions
  • Mentor engineers and security operations personnel
  • Engage vendors, industry groups, and technology partners on emerging AI security capabilities
  • At Sr. Advisor level, serve as enterprise authority on AI security, own multi-year strategy and investment case, represent Cybersecurity with executives, auditors, and external partners, and set technical direction

Requirements:

  • Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related IT technical field
  • 10+ years of experience in cybersecurity, security architecture, or platform/software engineering, including technical leadership, architecture, or senior advisory experience
  • Track record of setting technical direction at enterprise scale and influencing executive investment decisions
  • Experience designing or leading security programs across multiple products, teams, or business units
  • Strong understanding of cloud security, application security, identity and access management, data protection, and security operations
  • Hands-on experience with AI applications, agents, model platforms, or supporting infrastructure, including LLM APIs, agent frameworks, or agent-to-tool integration protocols
  • Understanding of LLM-specific threat models, including prompt injection, jailbreaks, sensitive data leakage, tool misuse, excessive agency, data poisoning, and model misuse
  • Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS
  • Ability to evaluate security products against organizational risks
  • Proficiency in Python or a comparable language
  • Working knowledge of AWS or Azure, REST APIs, and infrastructure-as-code
  • Ability to work across engineering, infrastructure, security, product, legal, and leadership teams
  • Experience building or operating inference-time guardrails, AI gateways, DLP for AI traffic, or AI detection and response tooling at enterprise scale
  • Experience with AI security reviews, adversarial red-teaming, or AI governance frameworks in regulated industries
  • Experience securing GPU/HPC, model-training, or inference platforms and related data pipelines
  • Familiarity with AI regulatory expectations, high-risk AI classifications, auditability requirements, and conformity assessments
  • Experience with SIEM/SOAR, EDR, and identity platforms in detection engineering or security operations
  • Relevant certifications such as CISSP, CCSP, or cloud security certifications
  • Experience with Agile delivery in cross-functional teams

Benefits:

  • Company bonus depending partly on company and individual performance
  • Company-sponsored 401(k)
  • Pension
  • Vacation benefits
  • Medical, dental, vision, and prescription drug benefits
  • Flexible benefits, including healthcare and/or dependent day care flexible spending accounts
  • Life insurance and death benefits
  • Time off and leave of absence benefits
  • Well-being benefits, including employee assistance program, fitness benefits, and employee clubs and activities