Lead Cybersecurity - Insider Risk Engineer

AT&T; Charlotte (NC); On-site; USD 141,300 - 211,900; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement

Paid Time Off and holidays

Paid parental leave

Employee discounts

Job summary

AT&T in Charlotte is hiring an Insider Risk AI Engineer to design, develop, and deploy AI-enabled security solutions. You will prototype AI features, build data pipelines, and implement RAG-based workflows, collaborating with engineers and product teams to turn prototypes into reliable services.

The role emphasizes evaluating AI outputs, tracking experiments, and integrating AI components into existing systems while documenting design notes and outcomes.

Qualifications

• 0–2 years of experience in software engineering, data engineering, analytics, or applied ML.
• Strong fundamentals in Python.
• Working knowledge of data structures, APIs, and basic software engineering practices.
• Data handling with pandas/SQL.
• ML basics and/or LLM application patterns.
• Familiarity with at least one AI/ML framework or platform.

Responsibilities

• Build AI prototypes and small services that solve defined problems.
• Develop and maintain data pipelines for AI use cases using approved data sources.
• Create and iterate on LLM prompts, agent/workflow logic, and RAG patterns.
• Implement evaluation methods for AI outputs and report results.
• Support model lifecycle tasks: experiment tracking, versioning, basic MLOps.
• Assist in integrating AI components into existing applications via APIs and lightweight UI.
• Document solutions and contribute to internal reusable components.
• Collaborate with stakeholders to define success metrics and guardrails.

Skills

Python

APIs

Git

Pandas/SQL

ML basics

LLM tooling

AI/GenAI concepts

Communication of tradeoffs

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

PyTorch

TensorFlow

scikit-learn

Job description

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join AT&T and help shape the future of communications and technology that connect the world. We value innovators who seek to explore the unknown and challenge the status quo. Bring your bold ideas and fearless spirit to redefine connectivity and transform how people share stories and experiences. At AT&T, you won’t just imagine the future—you’ll build it.

Position Overview

The Insider Risk AI Engineer supports the design, development, and deployment of AI‑enabled solutions that improve security operations and business workflows. This role focuses on building and iterating AI/ML and GenAI components (data prep, prompt/workflow design, evaluation, and lightweight model development), partnering with senior engineers, product owners, and operational teams to move prototypes into reliable services.

Key Responsibilities (AI‑Focused)

• Build AI prototypes and small services that solve defined problems (e.g., text classification, summarization, routing, search, Q&A, extraction).
• Develop and maintain data pipelines for AI use cases (collect, clean, label, transform) using approved data sources.
• Create and iterate on LLM prompts, agent/workflow logic, and retrieval‑augmented generation (RAG) patterns for internal knowledge use cases.
• Implement evaluation methods for AI outputs (quality, groundedness, hallucination checks, latency, cost) and report results.
• Support model lifecycle tasks: experiment tracking, versioning, basic MLOps (packaging, deployment, monitoring).
• Assist in integrating AI components into existing applications via APIs and lightweight UI or automation.
• Document solutions (design notes, datasets, prompt versions, test cases) and contribute to internal reusable components.
• Collaborate with stakeholders to define success metrics, acceptance criteria, and guardrails for AI‑enabled features.

Example Use Cases (Optional)

• Summarize tickets/incidents into standardized notes and action items.
• Auto‑tag and route requests based on description content.
• Extract entities and indicators from unstructured text (emails, logs, reports).
• Build an internal knowledge assistant over approved documentation with citations.
• Generate draft playbooks/runbooks from templates and curated inputs.

Required Skills / Qualifications

• 0–2 years of experience in software engineering, data engineering, analytics, or applied ML (internships/academic projects welcome).
• Strong fundamentals in Python.
• Working knowledge of data structures, APIs, and basic software engineering practices (testing, code reviews, Git).
• Data handling with pandas/SQL.
• ML basics (train/test splits, overfitting, common metrics) and/or LLM application patterns.
• Familiarity with at least one AI/ML framework or platform (PyTorch, TensorFlow, scikit‑learn, or common LLM tooling).
• Ability to write clear documentation and communicate tradeoffs (quality vs cost vs latency).

Preferred Qualifications

• Experience with GenAI application development patterns: RAG (embeddings, vector databases, chunking strategies), prompt engineering and prompt versioning, tool/function calling and agentic workflows, output evaluation and red‑teaming basics (prompt injection awareness, safety filters).
• Exposure to MLOps concepts: CI/CD for ML, model registry, feature stores, monitoring/drift.
• Experience with cloud services (any of AWS/Azure/GCP) and containerization (Docker).
• Basic understanding of privacy/security fundamentals for AI systems (data handling, access controls, logging).

Cybersecurity‑aligned preferred experience (nice‑to‑have)

• Experience partnering with or supporting a SOC (e.g., translating analyst workflows into automations, alert triage enrichment, case summarization).
• Familiarity with SIEM/EDR concepts and data (e.g., Splunk/Sentinel‑like searches, endpoint telemetry, detection event schemas) to build AI features on top of security telemetry.
• Exposure to threat intelligence & IOC handling (IPs/domains/URLs/hashes) and using AI to extract/normalize indicators from unstructured text.
• Working knowledge of incident response lifecycle and case management processes (ticketing, evidence handling, basic post‑incident reporting).
• Awareness of secure software practices (secrets management, least privilege, dependency hygiene) when building and deploying AI services.

Education / Experience

Education: Bachelor’s degree (BS/BA) desired in Computer Science or Cybersecurity. 5+ years of related experience. Certification is required in some areas.

Compensation & Benefits

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and holidays (at least 23 days of vacation each year and 9 company‑designated holidays)
• Paid parental leave
• Paid caregiver leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption reimbursement
• Disability benefits (short‑term and long‑term)
• Life and accidental death insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee assistance programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

Weekly Hours: 40

Time Type: Regular

Location: USA: NC: Charlotte / IBM Dr - Adm: 8505 IBM Dr

Salary Range: $141,300.00 - $211,900.00

It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities.

AT&T is a fair chance employer and does not initiate a background check until an offer is made.

#LI-Onsite – Full‑time office role-

Ready to join our team? Apply today.