Remote Lead: AI Application Security Champion

Sherwin-Williams Co.; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Sherwin-Williams Co. is seeking a Lead AI Application Security Champion to partner with development teams to embed security throughout the SDLC for AI-enabled applications.

You will facilitate threat modeling, define security requirements, and prioritize vulnerabilities across a portfolio of applications. You will develop security standards, guidance, and reusable patterns, and mentor teams in secure development practices.

Qualifications

• Bachelor's Degree (or foreign equivalent) or in lieu of a degree, at least 12 years in experience in the field of Information Technology or Business.

Responsibilities

• Acquire and interpret business, functional, technical, and architectural requirements to define application and AI security requirements
• Facilitate threat modeling and abuse-case analysis for traditional and AI-enabled applications
• Work with development teams, architects, and Cybersecurity partners to identify security risks and recommend appropriate controls
• Maintain knowledge of application and AI security practices, technologies, threats, and regulatory considerations through training, research, and collaboration
• Assist in developing and maintaining application and AI security standards, guidance, and reusable security patterns
• Identify opportunities to improve secure development practices and application security capabilities
• Work with architects and developers to incorporate security requirements and practices into new and existing application functionality
• Provide security guidance for LLM-based applications, internally developed AI solutions, agentic AI systems, and applications integrating third-party AI services
• Assist development teams with applying application and AI security standards throughout the software development lifecycle
• Provide recommendations for secure architecture, authentication, authorization, data protection, API security, and AI component integration
• Assist development teams with understanding, prioritizing, and remediating application security vulnerabilities
• Develop or recommend reusable guidance, patterns, reference implementations, and other resources that support secure development
• Serve as the primary Application Security partner for an assigned portfolio of development teams and applications
• Facilitate security reviews, threat modeling sessions, and other secure design activities
• Evaluate application designs, data flows, trust boundaries, model interactions, agent capabilities, and external integrations for security risks
• Provide risk-based guidance for prioritizing and remediating application security findings
• Assist development teams with interpreting and complying with application and AI security standards
• Connect development teams with appropriate Cybersecurity resources and specialized services
• Assist development teams with engaging application penetration testers when security assessments are needed
• Track and report activities, risks, recommendations, and progress associated with assigned teams and applications
• Create and maintain application and AI security documentation, guidance, reference materials, and standard operating procedures
• Develop and deliver application and AI security training or knowledge-sharing sessions
• Participate in cross-training related to application penetration testing and AI security testing
• Mentor developers and other team members in secure development practices
• Assist with evaluating tools, technologies, frameworks, and service providers
• Contribute to scripts, automation, reference implementations, and tools that improve capabilities
• Participate in team planning, retrospectives, and knowledge-sharing activities
• Make presentations to management, development teams, and peer groups as requested
• Perform project and task tracking and reporting as necessary

Skills

Threat modeling

Security requirements

Vulnerability prioritization

AI security

Secure development

Education

Bachelor's Degree

Job description

Sherwin-Williams Co. is seeking a Lead AI Application Security Champion to partner with development teams to embed security throughout the SDLC for AI-enabled applications.

You will facilitate threat modeling, define security requirements, and prioritize vulnerabilities across a portfolio of applications. You will develop security standards, guidance, and reusable patterns, and mentor teams in secure development practices.