Principal, AI Security

Duties & Responsibilities

• Define and lead Itron's enterprise AI security strategy, architecture, policies, standards, reference architectures, and multi-year roadmap.
• Design and implement security controls across the AI and agent lifecycle, including registration, inventory management, identity governance, credential protection, authorization boundaries, autonomy controls, human oversight checkpoints, memory isolation, and agent decommissioning.
• Establish scalable security guardrails for generative AI platforms, model integrations, APIs, plugins, automation workflows, AI assistants, and emerging agentic ecosystems.
• Develop and maintain governance controls supporting privacy, confidentiality, data protection, transparency, explainability, accountability, ethical AI use, and bias mitigation.
• Lead AI-focused threat modeling, adversarial testing, security reviews, and risk assessments for enterprise and customer-facing solutions.
• Evaluate and mitigate emerging AI threats, including prompt injection, tool misuse, privilege escalation, AI supply chain compromise, context poisoning, insecure agent interactions, and rogue agent behavior.
• Partner with engineering, product, and architecture teams to embed secure-by-design principles into the development, deployment, testing, and operation of AI-enabled systems.
• Advance the use of AI within Cybersecurity by designing and piloting AI-assisted capabilities that improve detection engineering, threat hunting, vulnerability management, alert triage, evidence collection, and operational effectiveness.
• Define security logging, telemetry, monitoring, alerting, and reporting requirements that measure AI control effectiveness and detect anomalous or malicious activity.
• Develop and operate AI Security Posture Management capabilities, including inventories, risk assessments, third-party evaluations, incident response processes, compliance readiness, and ongoing monitoring.
• Conduct security assessments of AI vendors, platforms, and service providers with emphasis on architecture, data handling, privacy, access controls, resiliency, and operational risk.
• Provide technical leadership and guidance for AI-related incidents, investigations, governance decisions, policy exceptions, and risk acceptance reviews.
• Author clear technical standards, reference architectures, implementation guidance, and executive communications that enable responsible and secure AI adoption.
• Mentor engineers, architects, and security practitioners while fostering a collaborative, customer-centric culture that balances innovation with risk management.
• Stay current on evolving AI technologies, industry regulations, attack techniques, and emerging security best practices, translating insights into actionable improvements for Itron.

Required Skills & Experience

• 7+ years of experience in cybersecurity, security architecture, cloud security, identity and access management, application security, product security, or a related technical discipline.
• 2+ years of experience working with AI-enabled systems, machine learning environments, automation platforms, advanced analytics solutions, or generative AI technologies.
• Demonstrated hands-on experience securing or building agentic systems, AI orchestration platforms, non-human identity solutions, model integrations, retrieval pipelines, and automated workflows.
• Experience implementing security controls for cloud platforms, APIs, identity services, secrets management, data protection, logging, monitoring, and third-party integrations.
• Proven experience conducting threat modeling, architecture reviews, security assessments, control validations, and cyber risk evaluations.
• Strong understanding of authentication, authorization, least privilege, secure software design principles, and modern security architectures.
• Ability to analyze complex AI and cybersecurity risks and communicate practical recommendations to both technical and business leaders.
• Exceptional written, verbal, facilitation, and stakeholder-management skills.
• Demonstrated ability to operate effectively across diverse teams while driving accountability, collaboration, and execution in a fast-changing technology environment.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent combination of education and experience.

Preferred Skills & Experience

• Experience securing large-scale deployments of frontier AI models through direct provider APIs, Microsoft Foundry, Amazon Bedrock, model gateways, or comparable enterprise AI platforms.
• Hands-on experience with Microsoft Foundry Agent Service, Model Context Protocol (MCP) implementations, AI gateway technologies, GitHub Copilot, Microsoft 365 Copilot, Vertex AI, Databricks AI capabilities, ChatGPT Enterprise, or similar platforms.
• Familiarity with AI security and governance frameworks such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, ISO/IEC 42001, and AI regulatory readiness initiatives.
• Experience performing AI red teaming, adversarial testing, prompt injection testing, abuse-case development, or AI deployment readiness assessments.
• Background in secure software development, DevSecOps, CI/CD security, container security, software supply chain security, or product security architecture reviews.
• Experience operating in regulated industries or environments aligned to ISO 27001, SOC 2, NIST, GDPR, CMMC, critical infrastructure, utilities, or similar compliance frameworks.
• Professional certifications such as CISSP, CCSP, CSSLP, Microsoft Security certifications, cloud security certifications, AI governance certifications, AI security certifications, or equivalent credentials.