Full-Time Staff Cyber Security Engineer (Generative AI)

We are seeking a Staff Cyber Security Engineer for our NBCU Security Architecture team, focusing on emerging technologies, including AI. This role requires collaboration with NBCUniversal businesses, enterprise IT, and the Cyber Security organization to ensure secure design and deployment of technologies aligned with security and enterprise strategies. This individual will act as a security subject matter expert with broad knowledge across domains, embedded with engineering teams. The primary initial focus will be on security controls for AI systems and other emerging technologies. You need a thorough understanding of diverse threats and expertise in developing threat models, control strategies integrated into design, development, and operation of technology platforms.

Responsibilities include analysis involving collaboration across the Cyber organization, partnerships with business stakeholders, resulting in security guidance and mitigation requirements. Effective communication of Cyber programs and services to obtain support and buy-in from business and technology teams is crucial to achieving security goals.

Basic Requirements:

• 8+ years experience partnering with business and technical teams to architect secure products and maintain security throughout their lifecycle.
• Ability to explain common threats to network, cloud, web, and application environments and design mitigations considering product and business needs.
• Knowledge and awareness of ML and generative AI technologies, including security concerns and mitigations.
• Knowledge of best practices in Cyber Security, including OWASP Top 10 and CWE/SANS Top 25.
• Advanced technical knowledge in one or more security domains, with expertise in designing complex systems and mitigating significant risks.
• Ability to give and receive constructive feedback, fostering a culture of improvement.
• Mentorship of junior team members.
• Strong written/verbal communication and presentation skills for technical and non-technical audiences.
• Continuous learning and experimentation with new technologies.
• Experience developing and documenting security guidelines or security best practices.
• Excellent time management skills for prioritizing multiple concurrent projects.

Desired Characteristics:

• Experience performing Threat Analysis and modeling leveraging frameworks like MITRE ATT&CK.
• Familiarity with security control frameworks such as Cloud Security Matrix, NIST CSF, and CIS Critical Security Controls.
• In-depth knowledge of generative AI platforms (Azure OpenAI, GPT-4, Llama, Midjourney), underlying technologies, and safety/security risks.
• Understanding of data and privacy regulations (PCI DSS, SOX, HIPAA, GDPR, CCPA).
• In-depth knowledge of common Cloud services and platforms (IaaS, PaaS, SaaS).
• Understanding of Cybersecurity Engineering/Operations, Incident Response, and GRC functions.
• Empathy for engineering teams to balance security guidelines with operational needs.

Additional Requirements:

• Fully Remote Position
• Eligible for company-sponsored benefits (medical, dental, vision, 401k, paid leave, tuition reimbursement, etc.).
• Salary range: $125,000 - $155,000 (bonus eligible)
• Ongoing application acceptance.
• Potential in-person interviews at NBCUniversal locations.

Equal Opportunity Employer

What is the last date for applying to the job?

Which countries are accepted for this remote job?