Distinguished AI Threat Defense Architect

Thomson Reuters; Eagan (MN); Hybrid; USD 198,000 - 424,000; Full time

Benefits offered by this job

Hybrid Work Model

Medical benefits

Tuition reimbursement

Employee stock purchase plan

Job summary

Thomson Reuters seeks a Distinguished Engineer to lead AI threat defense within the Cyber Defense organization. You will drive strategy for AI-specific attack vectors and coordinate with SOC, CIRT, Threat Detection Engineering, and AppSec to embed security across the development lifecycle.

You will build AI-augmented detection and response, integrate these capabilities into the SIEM and SOAR stack, and mentor teams without formal management authority. A hybrid US office presence is expected.

Qualifications

• 12+ years of progressive cybersecurity engineering experience at senior levels (e.g., Principal/Staff/Distinguished Engineer).
• Deep hands-on knowledge of AI-specific attack vectors and defensive architectures.
• Production experience governing AI systems, agentic infrastructure, MCP integration.
• Proven experience delivering AI-assisted detection and response within a mature 24/7 SOC/CIRT.
• Ability to influence technical teams without formal reporting authority.
• Experience driving adoption of detection capabilities across SOC Operations, CIRT, Threat Detection Engineering, Vulnerability Management, and Attack Surface Reduction.

Responsibilities

• Own AI threat defense strategy against AI-specific attack vectors such as prompt injection, MCP exploitation, and AI-assisted reconnaissance.
• Define standards for securing AI infrastructure and ensuring monitorability and defendability.
• Monitor emerging AI threats and adversary tooling to advance Cyber Defense capabilities.
• Monitor and defend AI-specific threat classes (prompt injection, jailbreaking, data disclosure, model poisoning, etc.).
• Embed security into the software development lifecycle with Product Engineering and AppSec.
• Build AI-augmented detection content and analytics for AI-specific attack patterns.
• Integrate AI threat detection into SIEM, SOC monitoring, and SOAR workflows.
• Develop AI-assisted playbooks and workflows within CIRT and SOAR.
• Serve as principal technical architect for AI capabilities within the 24/7 SOC/CIRT ecosystem.
• Design automated workflows for AI-related detection, triage, investigation, and response.
• Increase analyst productivity while maintaining human-in-the-loop controls and audit trails.
• Drive adoption across SOC Operations, CIRT, and related threat reduction teams.

Skills

AI threat defense

Cyber defense architecture

SOC/CIRT collaboration

Threat monitoring

Influence without management

AI security strategy

Education

Bachelor's degree in Computer Science/Engineering

Tools

SIEM

SOAR

CIRT workflows

Job description

Thomson Reuters seeks a Distinguished Engineer to lead AI threat defense within the Cyber Defense organization. You will drive strategy for AI-specific attack vectors and coordinate with SOC, CIRT, Threat Detection Engineering, and AppSec to embed security across the development lifecycle.

You will build AI-augmented detection and response, integrate these capabilities into the SIEM and SOAR stack, and mentor teams without formal management authority. A hybrid US office presence is expected.