Senior Manager – Cyber Security Engineer

Role Purpose

Continuous Security Validation

• Design and operate continuous security validation across AWS cloud infrastructure, applications, AI/LLM workloads, and model supply chains.
• Integrate autonomous security testing tools such as AWS Security Agent, Horizon3.ai, or equivalent platforms into CI/CD pipelines.
• Execute automated adversarial tests based on a 2LoD-approved threat coverage matrix.
• Establish automated security gates to prevent deployment when critical security controls fail.

Threat Intelligence and AI Security

• Own the seven-day threat-intelligence operationalization SLA.
• Monitor MITRE ATLAS, OWASP LLM Top 10, and other relevant threat-intelligence sources.
• Translate emerging attack techniques into repeatable security test cases using Jira automation.
• Develop adversarial scenarios covering prompt injection, jailbreaks, data leakage, excessive agency, insecure tool use, model manipulation, and supply-chain risks.
• Use tools such as Garak, PyRIT, Claude Security/Opus, and Codex for continuous AI security validation.

Vulnerability and Metrics Governance

• Aggregate, deduplicate, prioritize, and manage security findings through DefectDojo.
• Establish severity-based MTTR remediation gates and validate remediation evidence before redeployment approval.
• Develop Power BI dashboards covering findings, MTTR, pipeline gate pass rate, prompt injection block rate, threat coverage, and SLA compliance.
• Provide management reporting on security posture, control effectiveness, emerging threats, and remediation performance.

1LoD and 2LoD Model

• Maintain separation between 1LoD control validation and independent 2LoD security assurance and red teaming.
• Execute blue-team control validation against approved threat scenarios and test coverage.
• Ensure independent unknown-scenario testing remains within the 2LoD remit.

Required Technical Expertise

• Strong experience in offensive security, penetration testing, adversarial simulation, blue-team validation, and continuous security validation.
• Experience transitioning organizations from manual penetration testing to automated or continuous security control validation.
• Hands-on experience with autonomous penetration-testing platforms such as AWS Security Agent, Horizon3.ai, or equivalent.
• Strong AI/LLM security and red-teaming expertise, including Garak, PyRIT, Claude Security/Opus, Codex, or comparable tools.
• Strong knowledge of OWASP LLM Top 10, MITRE ATLAS, cloud security, AWS security controls, and application security.
• Experience with CI/CD, DevSecOps, DefectDojo, Jira automation, vulnerability management, security metrics, and Power BI.
• Strong understanding of 1LoD/2LoD governance, independent assurance, and security risk management.
• Banking-domain experience is required.