AI Security Director: Attack Surface & Automation

01460 Continental Casualty Company; Chicago (IL); Hybrid; USD 97,000 - 189,000; Full time

Job summary

CNA is seeking a Consulting Director, Attack Surface Management to shape strategy and governance for automation, AI, and agentic AI across security programs. You’ll drive AI-enabled risk identification, remediation, and secure development practices while partnering with senior leadership to improve efficiency and outcomes.

The role emphasizes defining strategy, deploying AI-centric solutions, and providing metrics to ensure regulatory alignment and program maturity in a hybrid work environment.

Qualifications

• Bachelor’s Degree required or equivalent work experience.
• Master’s Degree preferred for advanced expertise.
• Typically, a minimum of ten years in information security roles.

Responsibilities

• Define and implement AI automation strategy for application security, vulnerability management, ethical hacking, and attack surface management use cases.
• Evaluate, deploy, manage, and govern AI-centric solutions and capabilities across domains.
• Identify, prioritize, and drive high-value outcomes to improve efficiency and risk posture.
• Develop audit-defensible governance, standards, and secure AI development practices.
• Lead risk analysis of the external attack surface with automation and analytics.
• Provide leadership with metrics and reporting for risk management and program maturity.

Skills

AI/ML security concepts

Automation

Vulnerability management

Application security

Threat management

Communication with leadership

Education

Bachelor's Degree or equivalent

Master's Degree preferred

Job description

CNA is seeking a Consulting Director, Attack Surface Management to shape strategy and governance for automation, AI, and agentic AI across security programs. You’ll drive AI-enabled risk identification, remediation, and secure development practices while partnering with senior leadership to improve efficiency and outcomes.

The role emphasizes defining strategy, deploying AI-centric solutions, and providing metrics to ensure regulatory alignment and program maturity in a hybrid work environment.