Advisory Engineer, AI Security

Lenovo is a global technology company developing AI-enabled devices, infrastructure, software, solutions, and services. The Advisory Engineer, AI Security will lead security architecture and assurance for AI models, AI-enabled products, and AI development platforms, defining secure-by-design standards, conducting technical reviews, and driving remediation and adoption across engineering teams.

Responsibilities:

• Drive delivery of the AI Security Architecture and Assurance roadmap, defining priorities, milestones, technical deliverables and success measures; track agreed remediation actions through to closure
• Define and maintain secure-by-design technical standards, reference architectures, control patterns and assessment methodologies for AI models, LLM and agentic AI systems and AI development platforms
• Lead security architecture reviews, threat modelling and technical assurance for high-risk AI systems, products and material changes
• Establish and improve model-assurance requirements for third-party and open-weight models, including provenance, supply-chain risk, deployment configuration, vulnerabilities, updates and compensating controls
• Define security requirements and technical evaluation criteria for AI security tooling; partner with operational teams on implementation, integration and lifecycle management
• Support material AI security incidents and convert lessons learned into improved controls, standards and engineering guidance
• Occasional domestic and international travel (approx. 5%) for meetings and collaboration

Requirements:

• • Bachelor's degree in computer science, artificial intelligence, data science, software engineering, mathematics, or a related field
• • 8+ years in product security, application security, cloud security, security engineering or a closely related discipline**.**
• • Demonstrated track record of delivering complex security initiatives from assessment and design through implementation, validation and operational handover, with measurable adoption and risk-reduction outcomes
• • Experience leading security architecture reviews, threat modelling and remediation through the software or product development lifecycle
• • Strong understanding of AI security threats and mitigations
• • Experience designing or assessing security controls across cloud environments, APIs, CI/CD pipelines, identity/access management and data flows
• • Ability to convert security findings and standards into prioritized technical requirements, clear delivery plans and implementable remediation guidance for engineering teams
• • Ability to participate in incident response and product security operations as required
• • Relevant security certifications are advantageous