GenAI Data Protection Security Engineer (Hybrid)

Citizens; Johnston (RI); Hybrid; USD 114,000 - 152,000; Full time

Job summary

Citizens is seeking a Senior Security Engineer to design, implement, and operationalize AI Security and GenAI data protection capabilities across the AI Gateway platform, collaborating with Cybersecurity, Data Protection, and business teams.

This hybrid role requires four days onsite and one day remote in Johnston, RI or other hubs, focusing on policy engineering, remediation, and ongoing optimization to securely enable enterprise AI adoption.

Qualifications

• 5+ years of progressive experience in cybersecurity, information security engineering, or related technical disciplines.
• 2+ years hands-on experience with Data Protection, SSE, SASE, CASB, DLP, AI Security, GenAI Security, or similar inline security technologies.
• Hands-on experience implementing, configuring, or supporting enterprise security platforms and controls.
• Understanding GenAI data flows and security risks across prompts, uploads, browser traffic, embedded copilots, APIs, AI agents, and third party integrations.
• Experience implementing security controls capable of monitoring, coaching, redacting, quarantining, or blocking risky data movement in real time.
• Working knowledge of SIEM, SOAR, ITSM, identity management, and security orchestration workflows.
• Experience with identity and access management concepts including corporate vs personal instances, least privilege, non human identities, OAuth, OIDC, and service to service access.
• Understanding of data protection, governance, risk management, and regulated industry control requirements.
• Strong analytical and troubleshooting skills with the ability to investigate technical issues and translate findings into actionable remediation.
• Strong communication skills with the ability to explain technical risks and security requirements to engineering, technology, and business partners.
• Experience working across technical teams to implement and operationalize security controls in complex enterprise environments.

Responsibilities

• Engineer, configure, and support AI Gateway capabilities across evaluation, proof of concept, deployment, policy tuning, operational support, and continuous improvement.
• Support phased implementation of AI security controls from monitor mode to warn and coach to targeted blocking, using observed AI traffic, risk metrics, and user behavior to inform control decisions.
• Develop and tune controls for GenAI prompts, file uploads, browser traffic, embedded copilots, sanctioned AI platforms, and unsanctioned AI applications.
• Implement inline remediation capabilities including redaction, quarantine, user coaching, warning, and blocking.
• Develop instance aware controls that distinguish corporate from personal accounts and reduce the risk of sensitive data exposure.
• Assess security risks associated with AI agents, MCP, non human identities, third party integrations, APIs, and emerging AI access patterns.
• Integrate AI Gateway telemetry and security events with SIEM, SOAR, ITSM, identity platforms, data protection solutions, and evidence repositories.
• Develop and maintain AI security policies, detection logic, enforcement rules, exception processes, and technical operating procedures.
• Monitor and improve control effectiveness through coverage, policy accuracy, false positive and false negative trends, remediation outcomes, and user experience metrics.
• Troubleshoot complex AI security and data protection issues and partner with technology teams to identify practical remediation approaches.
• Partner with business teams and AI platform owners to implement coaching and enforcement controls while minimizing unnecessary business disruption.
• Stay current on AI security threats, GenAI data loss trends, agentic AI developments, MCP capabilities, and emerging security technologies.
• Contribute to security standards, procedures, technical documentation, training materials, and enterprise communications supporting secure AI adoption.
• Support risk, audit, and regulatory readiness through documentation of security controls, policy decisions, exceptions, and enforcement outcomes.

Skills

5+ years cybersecurity experience

Data Protection, SSE, SASE, CASB, DLP,

Enterprise security platforms

GenAI data flows security

Real-time data movement controls

SIEM, SOAR, ITSM

IAM concepts (OAuth, OIDC, leastpriv)

Data protection governance & risk

Analytical & troubleshooting

Communication with eng/business

Cross-team security enablement

Education

Bachelor's degree in Computer Science/Information Security/IT or related field

Tools

Python

PowerShell

APIs

Automation

Reporting

Workflow orchestration

Job description

Citizens is seeking a Senior Security Engineer to design, implement, and operationalize AI Security and GenAI data protection capabilities across the AI Gateway platform, collaborating with Cybersecurity, Data Protection, and business teams.

This hybrid role requires four days onsite and one day remote in Johnston, RI or other hubs, focusing on policy engineering, remediation, and ongoing optimization to securely enable enterprise AI adoption.