Principal AI Security Architect: GenAI Data Protection

Pittsburgh Tomorrow; Pittsburgh (Allegheny County); Hybrid; USD 130,000 - 195,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Retirement plans

Parental leave

Flexible work arrangements

Education reimbursement

Wellness programs

Generous paid time off

Job summary

Citizens is seeking a Principal Security Engineer to lead the design, implementation, and enterprise rollout of its AI Security and GenAI data protection capability. The role partners with Cybersecurity, Data Protection, and cross-functional teams to reduce data loss risk while enabling responsible AI adoption.

The position requires 7+ years in security disciplines, 2+ years in GenAI security, and hands-on experience with inline security controls and governance.

Responsibilities

• Own the end to end AI Gateway capability across evaluation, PoC, selection, deployment, configuration, policy tuning, operational support, and continuous improvement.
• Develop and execute a phased rollout from monitor mode to warn and coach to targeted blocking, using observed AI traffic and risk metrics to establish baselines and control implementation.
• Engineer and tune controls for GenAI prompts, file uploads, browser traffic, embedded copilots, and sanctioned and unsanctioned AI applications.
• Implement inline remediation controls including redaction, quarantine, user coaching, warning, and blocking.
• Establish instance aware controls that distinguish corporate from personal accounts and reduce data leakage risk.
• Assess AI and agentic integration risks involving AI agents, MCP, non human identities, third party integrations, and emerging access paths.
• Integrate AI Gateway telemetry with SIEM, SOAR, ITSM, identity platforms, data protection solutions, and evidence repositories.
• Define and operationalize governance standards, policy lifecycle processes, exception handling procedures, escalation paths, and ownership models.
• Measure and report program effectiveness through coverage, policy accuracy, false positive and false negative trends, remediation outcomes, audit evidence quality, and user experience metrics.
• Partner with business leaders and AI platform owners to introduce coaching and enforcement controls with minimal disruption.
• Stay current on AI security threats, GenAI data loss trends, agentic AI developments, MCP capabilities, and evolving security technologies.
• Contribute to standards, procedures, training materials, and enterprise communications related to secure AI adoption.
• Support risk, audit, and regulatory readiness through maintenance of defensible security evidence, policy decisions, exceptions, and enforcement outcomes.

Job description

Citizens is seeking a Principal Security Engineer to lead the design, implementation, and enterprise rollout of its AI Security and GenAI data protection capability. The role partners with Cybersecurity, Data Protection, and cross-functional teams to reduce data loss risk while enabling responsible AI adoption.

The position requires 7+ years in security disciplines, 2+ years in GenAI security, and hands-on experience with inline security controls and governance.