Cyber Exposure Lead & AI Security Scanning

The Depository Trust & Clearing Corporation (DTCC); Jersey City (NJ); On-site; USD 180,000 - 260,000; Full time

Job summary

The Depository Trust & Clearing Corporation (DTCC) seeks a Principal Cyber Exposure Management Associate Director to lead cyber exposure capabilities across vulnerabilities, applications, cloud, and pipelines.

You will guide AI-enabled security scanning programs, prioritize remediation, and drive risk-informed decisions, partnering with architecture, risk, and control teams to integrate security into development and operations.

Qualifications

• Strong experience in cyber exposure management, vulnerability management, application security, or security engineering.
• Knowledge of application and software security testing, including static analysis, dynamic analysis, software composition analysis, penetration testing, and secure development practices.
• Experience integrating security tools with software delivery pipelines, cloud platforms, application inventories, ticketing systems, and reporting platforms.
• Understanding of AI and large language model security, AI-assisted testing, agentic workflows, model evaluation, prompt and tool abuse risks, and responsible human oversight.
• Ability to design or lead automation using application programming interfaces, scripting, workflow orchestration, and data integration.
• Experience with risk-based prioritization that considers technical severity, exploitability, asset criticality, business impact, and compensating controls.
• Strong governance and stakeholder-management skills, with the ability to work across cybersecurity, technology, risk, legal, audit, and business teams.
• Clear written and verbal communication, including the ability to explain complex technical issues to senior leaders.

Responsibilities

• Lead the design and delivery of cyber exposure management capabilities that bring together vulnerability, application security, cloud, and asset risk data.
• Support frontier-model AI security scanning programs, including testing strategies, scanning harnesses, orchestration, model integration, control points, human review, and evidence capture.
• Advance the AI VDR operating model by connecting continuous, lower-cost scanning with targeted deep-assurance testing for higher-risk systems.
• Establish repeatable methods to validate findings, reduce duplicate results, prioritize remediation, and measure exposure reduction.
• Partner with application, infrastructure, cloud, engineering, architecture, risk, and control teams to integrate security scanning into development and operational workflows.
• Provide leadership for vulnerability management and application security management, including governance, remediation oversight, exception handling, reporting, and risk-based prioritization.
• Define requirements and guardrails for secure use of AI models and external scanning capabilities, including isolation, access, approvals, data handling, auditability, and operating limits.
• Evaluate security platforms, scanning technologies, and internal or third-party harness components based on effectiveness, scalability, integration, control coverage, and cost.
• Convert technical findings into clear risk decisions, implementation plans, and executive-level reporting.
• Mentor engineers and influence delivery teams without relying solely on direct authority.

Skills

Cyber exposure management

Vulnerability management

Application security

Security engineering

Job description

The Depository Trust & Clearing Corporation (DTCC) seeks a Principal Cyber Exposure Management Associate Director to lead cyber exposure capabilities across vulnerabilities, applications, cloud, and pipelines.

You will guide AI-enabled security scanning programs, prioritize remediation, and drive risk-informed decisions, partnering with architecture, risk, and control teams to integrate security into development and operations.