Senior Security Engineer - Data Protection

Senior Security Engineer, AI Security & GenAI Data Protection

Citizens is seeking a Senior Security Engineer to help design, implement, and operationalize its AI Security and Generative AI (GenAI) data protection capabilities. This role will provide hands on engineering expertise for the AI Gateway platform, supporting evaluation, deployment, configuration, policy engineering, inline remediation, integration, and ongoing optimization across sanctioned and unsanctioned AI usage.

The Senior Security Engineer will work closely with Cybersecurity, Data Protection, Technology, Risk, Privacy, Legal, and business teams to reduce data loss risk while enabling responsible enterprise adoption of AI and GenAI technologies.

Work Arrangement

Hybrid, 4 days onsite and 1 day remote in one of the following hubs: Johnston, RI | Boston, MA | Marlton, NJ | Pittsburgh, PA | Phoenix, AZ | Irving, TX | Manchester, NH

Key Responsibilities

• Engineer, configure, and support AI Gateway capabilities across evaluation, proof of concept, deployment, policy tuning, operational support, and continuous improvement.

• Support phased implementation of AI security controls from monitor mode to warn and coach to targeted blocking, using observed AI traffic, risk metrics, and user behavior to inform control decisions.

• Develop and tune controls for GenAI prompts, file uploads, browser traffic, embedded copilots, sanctioned AI platforms, and unsanctioned AI applications.

• Implement inline remediation capabilities including redaction, quarantine, user coaching, warning, and blocking.

• Develop instance aware controls that distinguish corporate from personal accounts and reduce the risk of sensitive data exposure.

• Assess security risks associated with AI agents, Model Context Protocol (MCP), non human identities, third party integrations, APIs, and emerging AI access patterns.

• Integrate AI Gateway telemetry and security events with SIEM, SOAR, ITSM, identity platforms, data protection solutions, and evidence repositories.

• Develop and maintain AI security policies, detection logic, enforcement rules, exception processes, and technical operating procedures.

• Monitor and improve control effectiveness through coverage, policy accuracy, false positive and false negative trends, remediation outcomes, and user experience metrics.

• Troubleshoot complex AI security and data protection issues and partner with technology teams to identify practical remediation approaches.

• Partner with business teams and AI platform owners to implement coaching and enforcement controls while minimizing unnecessary business disruption.

• Stay current on AI security threats, GenAI data loss trends, agentic AI developments, MCP capabilities, and emerging security technologies.

• Contribute to security standards, procedures, technical documentation, training materials, and enterprise communications supporting secure AI adoption.

• Support risk, audit, and regulatory readiness through documentation of security controls, policy decisions, exceptions, and enforcement outcomes.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or related field, or equivalent professional experience.

• 5+ years of progressive experience in cybersecurity, information security engineering, or related technical disciplines.

• 2+ years of hands on experience with Data Protection, SSE, SASE, CASB, DLP, AI Security, GenAI Security, or similar inline security technologies.

• Hands on experience implementing, configuring, or supporting enterprise security platforms and controls.

• Understanding of GenAI data flows and associated security risks across prompts, uploads, browser traffic, embedded copilots, APIs, AI agents, and third party integrations.

• Experience implementing security controls capable of monitoring, coaching, redacting, quarantining, or blocking risky data movement in real time.

• Working knowledge of SIEM, SOAR, ITSM, identity management, and security orchestration workflows.

• Experience with identity and access management concepts including corporate versus personal instances, least privilege, non human identities, OAuth, OIDC, and service to service access.

• Understanding of data protection, governance, risk management, and regulated industry control requirements.

• Strong analytical and troubleshooting skills with the ability to investigate technical issues and translate findings into actionable remediation.

• Strong communication skills with the ability to explain technical risks and security requirements to engineering, technology, and business partners.

• Experience working across technical teams to implement and operationalize security controls in complex enterprise environments.

Preferred Qualifications

• CISSP, CCSP, CISM, or comparable security certifications.

• Direct experience with AI Gateway technologies or enterprise GenAI security controls.

• Experience with AI Security, DLP, SSE, SASE, CASB, DSPM, or related data protection platforms.

• Experience with Cyera Omni, Netskope AI Security, AISecOps, or similar technologies.

• Familiarity with Python, PowerShell, APIs, automation, reporting, and workflow orchestration.

• Experience working in financial services, healthcare, or other highly regulated industries.

• Experience implementing risk based enforcement models, exception management processes, and security control evidence.

• Experience securing agentic AI environments, MCP enabled integrations, AI agents, non human identities, prompt and upload workflows, and GenAI data leakage scenarios.

Pay Transparency

The salary range for this position is $114,000 - $152,000 per year, plus an opportunity to earn additional incentive earnings. Actual pay is based on various factors including but not limited to the budget, work location, and relevant skills and experience.

We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.

Equal Employment and Opportunity Employer

Job Applicant Data Privacy Policy

Background Check

Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.