Senior Security Engineer - Data Protection

Citizens Financial; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Citizens Financial is seeking a Senior Security Engineer to design, implement, and operationalize its AI Security and GenAI data protection capabilities. This role focuses on the AI Gateway platform, providing hands-on engineering expertise across evaluation, deployment, policy tuning, and remediation.

The position entails a hybrid arrangement with 4 days onsite and 1 day remote in hubs Johnston, RI; Boston, MA; Marlton, NJ; Pittsburgh, PA; Phoenix, AZ; Irving, TX; Manchester, NH.

Qualifications

• 5+ years of progressive experience in cybersecurity or information security engineering.
• 2+ years of hands-on experience with Data Protection, SSE, SASE, CASB, DLP, AI Security, or GenAI Security.
• Hands-on experience implementing and supporting enterprise security platforms and controls.
• Understanding GenAI data flows and associated security risks across prompts, uploads, browser traffic, APIs, and third-party integrations.
• Strong ability to translate technical risks into actionable remediation and clear communications.

Responsibilities

• Engineer, configure, and support AI Gateway capabilities across evaluation, deployment, and optimization.
• Develop inline remediation capabilities including redaction, quarantine, and blocking.
• Design and tune controls for GenAI prompts, file uploads, and sanctioned/unsanctioned AI apps.
• Integrate AI Gateway telemetry with SIEM, SOAR, ITSM, and identity platforms.
• Monitor control effectiveness and remediation outcomes to improve security posture.
• Partner with business teams to minimize disruption while enforcing security policies.
• Stay current on AI security threats, GenAI data loss trends, and emerging technologies.

Skills

Cybersecurity expertise

Security engineering

Analytical thinking

Troubleshooting

Communication skills

Cross-functional collaboration

Education

Bachelor's degree in Computer Science, Information Security, Information Technology, or related field, or equivalent professional experience

Tools

SIEM

SOAR

ITSM

Identity management

OAuth/OIDC

Job description

Senior Security Engineer, AI Security & GenAI Data Protection

Citizens is seeking a Senior Security Engineer to help design, implement, and operationalize its AI Security and Generative AI (GenAI) data protection capabilities. This role will provide hands on engineering expertise for the AI Gateway platform, supporting evaluation, deployment, configuration, policy engineering, inline remediation, integration, and ongoing optimization across sanctioned and unsanctioned AI usage.

The Senior Security Engineer will work closely with Cybersecurity, Data Protection, Technology, Risk, Privacy, Legal, and business teams to reduce data loss risk while enabling responsible enterprise adoption of AI and GenAI technologies.

Work Arrangement

Hybrid, 4 days onsite and 1 day remote in one of the following hubs: Johnston, RI | Boston, MA | Marlton, NJ | Pittsburgh, PA | Phoenix, AZ | Irving, TX | Manchester, NH

Key Responsibilities

• Engineer, configure, and support AI Gateway capabilities across evaluation, proof of concept, deployment, policy tuning, operational support, and continuous improvement.
• Support phased implementation of AI security controls from monitor mode to warn and coach to targeted blocking, using observed AI traffic, risk metrics, and user behavior to inform control decisions.
• Develop and tune controls for GenAI prompts, file uploads, browser traffic, embedded copilots, sanctioned AI platforms, and unsanctioned AI applications.
• Implement inline remediation capabilities including redaction, quarantine, user coaching, warning, and blocking.
• Develop instance aware controls that distinguish corporate from personal accounts and reduce the risk of sensitive data exposure.
• Assess security risks associated with AI agents, Model Context Protocol (MCP), non human identities, third party integrations, APIs, and emerging AI access patterns.
• Integrate AI Gateway telemetry and security events with SIEM, SOAR, ITSM, identity platforms, data protection solutions, and evidence repositories.
• Develop and maintain AI security policies, detection logic, enforcement rules, exception processes, and technical operating procedures.
• Monitor and improve control effectiveness through coverage, policy accuracy, false positive and false negative trends, remediation outcomes, and user experience metrics.
• Troubleshoot complex AI security and data protection issues and partner with technology teams to identify practical remediation approaches.
• Partner with business teams and AI platform owners to implement coaching and enforcement controls while minimizing unnecessary business disruption.
• Stay current on AI security threats, GenAI data loss trends, agentic AI developments, MCP capabilities, and emerging security technologies.
• Contribute to security standards, procedures, technical documentation, training materials, and enterprise communications supporting secure AI adoption.
• Support risk, audit, and regulatory readiness through documentation of security controls, policy decisions, exceptions, and enforcement outcomes.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or related field, or equivalent professional experience.
• 5+ years of progressive experience in cybersecurity, information security engineering, or related technical disciplines.
• 2+ years of hands on experience with Data Protection, SSE, SASE, CASB, DLP, AI Security, GenAI Security, or similar inline security technologies.
• Hands on experience implementing, configuring, or supporting enterprise security platforms and controls.
• Understanding of GenAI data flows and associated security risks across prompts, uploads, browser traffic, embedded copilots, APIs, AI agents, and third party integrations.
• Experience implementing security controls capable of monitoring, coaching, redacting, quarantining, or blocking risky data movement in real time.
• Working knowledge of SIEM, SOAR, ITSM, identity management, and security orchestration workflows.
• Experience with identity and access management concepts including corporate versus personal instances, least privilege, non human identities, OAuth, OIDC, and service to service access.
• Understanding of data protection, governance, risk management, and regulated industry control requirements.
• Strong analytical and troubleshooting skills with the ability to investigate technical issues and translate findings into actionable remediation.
• Strong communication skills with the ability to explain technical risks and security requirements to engineering, technology, and business partners.
• Experience working across technical teams to implement and operationalize security controls in complex enterprise environments.

Preferred Qualifications

• CISSP, CCSP, CISM, or comparable security certifications.
• Direct experience with AI Gateway technologies or enterprise GenAI security controls.
• Experience with AI Security, DLP, SSE, SASE, CASB, DSPM, or