Senior Security Engineer, AI Security & GenAI Data Protection
Citizens is seeking a Senior Security Engineer to help design, implement, and operationalize its AI Security and Generative AI (GenAI) data protection capabilities. This role will provide hands on engineering expertise for the AI Gateway platform, supporting evaluation, deployment, configuration, policy engineering, inline remediation, integration, and ongoing optimization across sanctioned and unsanctioned AI usage.
The Senior Security Engineer will work closely with Cybersecurity, Data Protection, Technology, Risk, Privacy, Legal, and business teams to reduce data loss risk while enabling responsible enterprise adoption of AI and GenAI technologies.
Work Arrangement
Hybrid, 4 days onsite and 1 day remote in one of the following hubs: Johnston, RI | Boston, MA | Marlton, NJ | Pittsburgh, PA | Phoenix, AZ | Irving, TX | Manchester, NH
Key Responsibilities
• Engineer, configure, and support AI Gateway capabilities across evaluation, proof of concept, deployment, policy tuning, operational support, and continuous improvement.
• Support phased implementation of AI security controls from monitor mode to warn and coach to targeted blocking, using observed AI traffic, risk metrics, and user behavior to inform control decisions.
• Develop and tune controls for GenAI prompts, file uploads, browser traffic, embedded copilots, sanctioned AI platforms, and unsanctioned AI applications.
• Implement inline remediation capabilities including redaction, quarantine, user coaching, warning, and blocking.
• Develop instance aware controls that distinguish corporate from personal accounts and reduce the risk of sensitive data exposure.
• Assess security risks associated with AI agents, Model Context Protocol (MCP), non human identities, third party integrations, APIs, and emerging AI access patterns.
• Integrate AI Gateway telemetry and security events with SIEM, SOAR, ITSM, identity platforms, data protection solutions, and evidence repositories.
• Develop and maintain AI security policies, detection logic, enforcement rules, exception processes, and technical operating procedures.
• Monitor and improve control effectiveness through coverage, policy accuracy, false positive and false negative trends, remediation outcomes, and user experience metrics.
• Troubleshoot complex AI security and data protection issues and partner with technology teams to identify practical remediation approaches.
• Partner with business teams and AI platform owners to implement coaching and enforcement controls while minimizing unnecessary business disruption.
• Stay current on AI security threats, GenAI data loss trends, agentic AI developments, MCP capabilities, and emerging security technologies.
• Contribute to security standards, procedures, technical documentation, training materials, and enterprise communications supporting secure AI adoption.
• Support risk, audit, and regulatory readiness through documentation of security controls, policy decisions, exceptions, and enforcement outcomes.
Required Qualifications
• Bachelor's degree in Computer Science, Information Security, Information Technology, or related field, or equivalent professional experience.
• 5+ years of progressive experience in cybersecurity, information security engineering, or related technical disciplines.
• 2+ years of hands on experience with Data Protection, SSE, SASE, CASB, DLP, AI Security, GenAI Security, or similar inline security technologies.
• Hands on experience implementing, configuring, or supporting enterprise security platforms and controls.
• Understanding of GenAI data flows and associated security risks across prompts, uploads, browser traffic, embedded copilots, APIs, AI agents, and third party integrations.
• Experience implementing security controls capable of monitoring, coaching, redacting, quarantining, or blocking risky data movement in real time.
• Working knowledge of SIEM, SOAR, ITSM, identity management, and security orchestration workflows.
• Experience with identity and access management concepts including corporate versus personal instances, least privilege, non human identities, OAuth, OIDC, and service to service access.
• Understanding of data protection, governance, risk management, and regulated industry control requirements.
• Strong analytical and troubleshooting skills with the ability to investigate technical issues and translate findings into actionable remediation.
• Strong communication skills with the ability to explain technical risks and security requirements to engineering, technology, and business partners.
• Experience working across technical teams to implement and operationalize security controls in complex enterprise environments.
Preferred Qualifications
• CISSP, CCSP, CISM, or comparable security certifications.
• Direct experience with AI Gateway technologies or enterprise GenAI security controls.
• Experience with AI Security, DLP, SSE, SASE, CASB, DSPM, or related data protection platforms.
• Experience with Cyera Omni, Netskope AI Security, AISecOps, or similar technologies.
• Familiarity with Python, PowerShell, APIs, automation, reporting, and workflow orchestration.
• Experience working in financial services, healthcare, or other highly regulated industries.
• Experience implementing risk based enforcement models, exception management processes, and security control evidence.
• Experience securing agentic AI environments, MCP enabled integrations, AI agents, non human identities, prompt and upload workflows, and GenAI data leakage scenarios.
Pay Transparency
The salary range for this position is $114,000 - $152,000 per year, plus an opportunity to earn additional incentive earnings. Actual pay is based on various factors including but not limited to the budget, work location, and relevant skills and experience.
We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits.
About Us
Equal Employment Opportunity
Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.
Equal Employment and Opportunity Employer
Job Applicant Data Privacy Policy
Background Check
Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.
Skills Required
- Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent professional experience.
- 5+ years of progressive experience in cybersecurity, information security engineering, or related technical disciplines.
- 2+ years of hands-on experience with Data Protection, SSE, SASE, CASB, DLP, AI Security, GenAI Security, or similar inline security technologies.
- Hands-on experience implementing, configuring, or supporting enterprise security platforms and controls.
- Understanding of GenAI data flows and security risks involving prompts, uploads, browser traffic, embedded copilots, APIs, AI agents, and third-party integrations.
- Experience implementing real-time security controls for monitoring, coaching, redacting, quarantining, or blocking risky data movement.
- Working knowledge of SIEM, SOAR, ITSM, identity management, and security orchestration workflows.
- Experience with identity and access management concepts, including corporate versus personal instances, least privilege, non-human identities, OAuth, OIDC, and service-to-service access.
- Understanding of data protection, governance, risk management, and regulated-industry control requirements.
- Strong analytical and troubleshooting skills with the ability to investigate technical issues and develop actionable remediation.
- Strong communication skills for explaining technical risks and security requirements to engineering, technology, and business partners.
- Experience working across technical teams to implement and operationalize security controls in complex enterprise environments.
- CISSP, CCSP, CISM, or comparable security certification.
- Direct experience with AI Gateway technologies or enterprise GenAI security controls.
- Experience with AI Security, DLP, SSE, SASE, CASB, DSPM, or related data protection platforms.
- Experience with Cyera Omni, Netskope AI Security, AISecOps, or similar technologies.
- Familiarity with Python, PowerShell, APIs, automation, reporting, and workflow orchestration.
- Experience in financial services, healthcare, or another highly regulated industry.
- Experience implementing risk-based enforcement models, exception management processes, and security control evidence.
- Experience securing agentic AI environments, MCP-enabled integrations, AI agents, non-human identities, prompt and upload workflows, and GenAI data leakage scenarios.
Citizens Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Citizens and has not been reviewed or approved by Citizens.
-
Parental & Family Support — Policies include six weeks of fully paid parental leave for all parents, up to 16 weeks for birthing parents, 10 days of emergency back‑up care, and adoption assistance of more than $25,000. Recognition for adoption support underscores a strong family‑friendly posture.
-
Leave & Time Off Breadth — Time off includes 11 paid holidays and up to 27 PTO days. The breadth of leave is presented as generous versus many peers.
-
Healthcare Strength — Medical, dental, and vision options pair with an HSA that includes a company contribution, plus mental‑health access via Spring Health (eight no‑cost sessions), Hinge Health, wellness programs, and discounted gyms. Eligibility at 20+ hours per week broadens access to these resources.
Citizens Insights
What We Do
As one of the oldest and largest financial services firms in the United States with a history dating back to 1828, we’re committed to providing solutions and expertise that support our customers, clients, colleagues, and communities in what’s next on their own unique journey. We invest in the humans who build the logic, ideas, and innovations that bring new technologies to life. Investments in AI, cloud computing, machine learning and automation provide our engineers the tools that enable us to remain competitive and win in today’s environment. At Citizens, we recognize that the journey to accomplishment is no longer linear and that individuals are made of all they have done and all they are going to do. Whether you’re considering banking with us or looking to work with us, you’ll find a customer-centric culture and a supportive, collaborative workforce at Citizens. You’re made ready and so are we. If you're ready to advance your career in technology and security, learn more about opportunity's Citizens offers here: https://jobs.citizensbank.com/digital-transformation
Why Work With Us
We empower the colleagues that power our tech. With growth & upskilling opportunities and sought-after benefits, plus a diverse culture of people and perspectives, we help our colleagues achieve career goals. Because innovation can’t happen without the minds and hearts of our people. Technology is constantly evolving, and we believe you can too.
Gallery
.png){kind=logo}
