Principal Information Security Engineer

Lumen Technologies connects the world by igniting business growth through secure and effortless connections of people, data, and applications. The Principal Information Security Engineer is responsible for designing and advancing Lumen’s enterprise AI security program, ensuring secure deployment of AI technologies and enhancing threat detection capabilities.

Responsibilities:

• Engineer and maintain enterprise AI security controls, reference patterns, and control baselines securing AI/ML systems end to end, including software components, models, data flows, and runtime platforms
• Engineer integrations that enable continuous discovery, authoritative inventory, lineage tracking, and policy enforcement across AI development and operational environments
• Ensure AI security capabilities align with Responsible AI, data governance, and enterprise security policies, supporting auditability and governance approvals
• Design and guide the development of AI enhanced threat and anomaly detection capabilities, including detection of AI generated attack patterns, model misuse, and data poisoning attempts
• Build deepfake and synthetic media detection solutions across text, audio, image, and video modalities to support fraud prevention, social engineering defense, and brand protection
• Establish secure baselines and framework for AI security assistants that support cross-functional security teams, especially those in operations. Document and build summarization, triage assistance, threat interpretation, and automated guidance
• Design autonomous and semi autonomous AI security agents capable of executing chained security tasks (evidence gathering, enrichment, validation), ensuring governance guardrails, human in the loop controls, and approval workflows
• Enable AI powered security automation and decision support, including AI driven prioritization, risk scoring, remediation recommendations, and fix validation
• Support AI augmented threat hunting, red teaming and security research by enabling controlled generative AI use for adversarial testing, prompt injection simulation, and model jailbreak scenario generation
• Act as a senior technical advisor to AI Governance, Data Governance, and Architecture Review Boards on AI risk, controls, and acceptable use
• Partner with architecture, DevOps and application teams to embed AI security controls into CI/CD pipelines and runtime environments
• Collaborate with Red Team / Offensive Security to ensure adversarial testing aligns with enterprise AI security architectures and emerging threat models
• Provide executive level reporting and technical narratives on AI security posture, capability maturity, and emerging risks

Requirements:

• Deep understanding of AI/ML systems, including model training, inference pipelines, orchestration frameworks, and agent based systems
• Expertise in AI specific threat classes, including prompt injection, data leakage, data poisoning, model extraction, adversarial inputs, and jailbreak techniques
• Experience securing generative AI, multimodal models, and agentic AI systems in enterprise environments
• Proven experience implementing enterprise scale security solutions spanning cloud, containers, CI/CD, and runtime environments
• Strong grounding in vulnerability management, remediation workflows, and risk based prioritization, including AI specific vulnerabilities
• Ability to translate security architecture and governance requirements into enforceable technical controls
• 15+ years in cybersecurity, with significant experience in security and advanced threat domains
• Demonstrated leadership as a principal level or enterprise architect, influencing standards and strategy without direct authority
• Strong understanding of Responsible AI, data classification, lineage, and compliance considerations
• Ability to communicate complex AI security concepts to engineering teams, executives, and governance bodies
• Experience operating in large, federated enterprise environments with complex cloud and DevOps ecosystems