Full-Time Staff Cyber Security Engineer (Generative AI)

We are seeking a Staff Cyber Security Engineer to join our NBCU Security Architecture team, focusing on emerging technologies, including AI.

This role involves partnering with NBCUniversal businesses, enterprise IT, and Cyber Security to ensure secure technology design and deployment aligned with strategies.

Responsibilities include acting as a security SME with broad knowledge, embedded within engineering teams, and initially focusing on AI system security controls.

Key tasks involve analyzing threats, developing mitigation strategies, collaborating with the Cyber organization and business stakeholders, and communicating security programs to achieve support and buy-in.

Basic Requirements:

• 8+ years of experience partnering with business and technical teams to architect secure products and maintain a secure posture throughout their lifecycle.
• Ability to explain common threats to components (Network, Cloud, Web, Application) and design mitigations.
• Knowledge and awareness of ML and generative AI technologies, security concerns, and mitigations.
• Knowledge of Cyber Security best practices (OWASP Top 10, CWE/SANS Top 25).
• Advanced technical knowledge in one or more security domains, with expertise in designing complex systems and mitigating significant risk.
• Strong communication and presentation skills for both technical and non-technical audiences.
• Excellent time management skills for prioritizing multiple projects.
• Experience developing and documenting security guidelines/best practices.

Desired Characteristics:

• Experience in Threat Analysis and modeling using frameworks like MITRE ATT&CK.
• Familiarity with security control frameworks (Cloud Security Matrix, NIST CSF, CIS Critical Security Controls).
• In-depth knowledge of generative AI platforms (Azure OpenAI, GPT-4, Llama, Midjourney) and their safety/security risks.
• Understanding of data and privacy regulations (PCI DSS, SOX, HIPAA, GDPR, CCPA).
• In-depth knowledge of cloud services and platforms (IaaS, PaaS, SaaS).
• Understanding of Cybersecurity Engineering/Operations, Incident Response, and GRC functions.
• Empathy for engineering teams to balance security guidelines with operational needs.

Additional Requirements:

• Fully remote position.
• Eligible for company-sponsored benefits (medical, dental, vision, 401(k), paid leave, tuition reimbursement).
• Salary range: $125,000 - $155,000 (bonus eligible).
• Ongoing application acceptance.
• Potential in-person interviews at NBCUniversal locations.

What is the last date for applying to the job?

Which countries are accepted for this remote job?