Principal Security AI Engineer

axiscapital; Alpharetta (GA); Sur place; USD 140 000 - 190 000; Plein temps

Résumé du poste

AXIS Capital is seeking an experienced security engineering professional to design, deploy, and govern secure AI platforms and workflows across risk and security operations.

You will lead governance, data protection, and AI risk management efforts, while ensuring Zero Trust principles and robust incident response processes. This role requires 5+ years in cybersecurity and hands-on Microsoft security ecosystem expertise.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or related field (Master's preferred).
• 5+ years of progressive experience in cybersecurity, data protection, or security engineering.
• Proven experience designing and securing enterprise AI platforms (Copilot, Copilot Studio, Azure Foundry).
• Governance, data grounding controls, prompt injection protections, and AI risk management.
• Development or oversight of security controls for AI-driven workflows and autonomous/agent-based systems.
• Hands-on expertise with Microsoft security and compliance ecosystems (Purview, M365, Azure).
• Data classification, sensitivity labeling, and lifecycle management.
• Insider Risk Management and Information Protection programs.

Responsabilités

• Design, develop, and operationalize secure AI capabilities in risk & security operations.
• Build, deploy, and maintain AI-powered security agents to augment detection and response workflows.
• Identify high-value AI use cases to enhance analyst productivity and outcomes.
• Validate agent performance, accuracy, and reliability in real-world operations.
• Ensure responsible and secure use of AI across risk & security operations.
• Enforce strong security controls for enterprise AI platforms and data flows.
• Monitor and tune data protection policies to meet regulatory requirements.
• Establish evaluation practices for AI reliability, explainability, and auditability.
• Align AI-driven processes with Zero Trust and least privilege principles.

Connaissances

Cybersecurity

Data protection

Security engineering

AI governance

Zero Trust

DLP governance

Insider risk

Azure security

Formation

Bachelor's in IT/Cybersecurity

Master's preferred

Outils

Microsoft Copilot

Copilot Studio

Azure AI Foundry

Microsoft Purview

Description du poste

This is your opportunity to join AXIS Capital - a trusted global provider of specialty lines insurance and reinsurance. We stand apart for our outstanding client service, intelligent risk taking and superior risk adjusted returns for our shareholders. We also proudly maintain an entrepreneurial, disciplined and ethical corporate culture. As a member of AXIS, you join a team that is among the best in the industry.

At AXIS, we believe that we are only as strong as our people. We strive to create an inclusive and welcoming culture where employees of all backgrounds and from all walks of life feel comfortable and empowered to be themselves. This means that we bring our whole selves to work.

All qualified applicants will receive consideration for employment without regard to any protected characteristic, including age, color, disability, ethnicity, gender identity, marital status, national origin, pregnancy, race, religion, sex, sexual orientation, veteran status, or any basis prohibited by the laws that govern its operations.

Responsibilities

• Design, develop, and operationalize secure agentic AI capabilities in risk & security operations
• Build, deploy, and maintain AI-powered security agents to augment detection, investigation, and response workflows
• Identify high-value use cases where AI agents can accelerate analyst productivity and improve outcomes
• Continuously validate agent performance, accuracy, and reliability in real-world operations
• Ensure responsible and secure use of AI across risk & security operations
• Enforce strong security controls for enterprise AI platforms (e.g., Microsoft Copilot, Copilot Studio, Azure AI Foundry)
• Mitigate AI-specific risks including data leakage, prompt injection, oversharing, and unauthorized access
• Establish evaluation practices for agent accuracy, hallucination risk, false positives/false negatives, failure modes, explainability, audit logging, and measurable operational impact.
• Ensure human-in-the-loop oversight to include analysts challenge, refine, and retrain AI-driven outcomes
• Implement and manage data protection controls for AI and enterprise data
• Deploy and optimize Microsoft Purview capabilities (DLP, Information Protection, Insider Risk) across M365 and AI platforms
• Implement DLP controls for AI interactions and outputs to prevent sensitive data exposure
• Monitor and tune data protection policies to meet regulatory and business requirements
• Secure AI agents, automation, and data flows
• Define and enforce access controls, data handling policies, and auditability for AI agents and automated workflows
• Ensure all AI-driven processes align with Zero Trust and least privilege principles
• Evaluate and onboard new AI tools and agents with a security-first approach
• Operational monitoring, detection, and response
• Monitor AI platform activity and data usage to detect anomalies, misuse, or policy violations
• Support incident response and investigations involving AI systems and data exposure scenarios
• Integrate AI agent workflows directly with SIEM/XDR platforms to allow autonomous context enrichment and preliminary incident triage.
• Support enterprise rollout of AI governance and data security programs

About You

We encourage you to bring your own experience and expertise to the table, so while there are some qualifications and experiences, we need you to have, we are open to discussing how your individual knowledge might lend itself to fulfilling this role and help us achieve our goals.

What you need to have

• Bachelor's degree in Information Technology, Cybersecurity, or related field (Master's preferred), OR equivalent experience leading enterprise-scale security engineering initiatives
• 5+ years of progressive experience in cybersecurity, data protection, or security engineering
• Proven experience designing and securing enterprise AI platforms, including: Microsoft Copilot, Copilot Studio, and Azure AI Foundry
• Governance, data grounding controls, prompt injection protections, and AI risk management
• Development or oversight of security controls for AI-driven workflows and autonomous/agent-based systems.
• Hands-on expertise with Microsoft security and compliance ecosystems, including: Microsoft Purview (end-to-end deployment, governance, and optimization)
• Microsoft 365, Azure, and Entra ID security architecture
• Collaboration platforms (Exchange, SharePoint, OneDrive, Teams) with a strong focus on data protection and insider risk
• Proven expertise in Data Security and Protection, including: Data Loss Prevention (DLP) strategy, engineering, and tuning at scale
• Data classification, sensitivity labeling, and lifecycle management
• Insider Risk Management and Information Protection programs
• Demonstrated ability to architect and lead enterprise security solutions, including: Defining strategy, roadmaps, and reference architectures
• Driving cross-functional initiatives across Security, IT, Legal, and Business teams
• Acting as a technical authority and escalation point for complex security challenge