Lead Information Security Engineer – AI

A position at White Cap isn’t your ordinary job. You’ll work in an exciting and diverse environment, meet interesting people, and have a variety of career opportunities.

The White Cap family is committed to Building Trust on Every Job. We do this by being deeply knowledgeable, fully capable, and always dependable, and our associates are the driving force behind this commitment.

Job Summary

Responsible for managing information security for AI and related technologies across the company, helping protect systems, data, and applications by implementing security controls, monitoring risks, addressing vulnerabilities, responding to security incidents, and maintaining secure technology environments.

Major Tasks, Responsibilities and Key Accountabilities

- Owns and maintains the enterprise and AI security reference architecture, designing security architecture elements and control patterns that mitigate threats before new capabilities reach production.
- Provides critical input into the selection of security technologies that align with strategic and tactical objectives.
- Initiates and leads security response procedures, serving as the subject matter expert for security incidents, including AI-specific model abuse, pipeline compromise, and anomalous agent behavior.
- Designs security architecture elements to mitigate emerging threats.
- Classifies and controls data flowing into systems, pipelines, and LLM context windows, enforcing data masking, tokenization, data loss prevention (DLP), and secrets management.
- Conducts independent testing and evaluation of new and existing systems, including security testing, vulnerability scanning, configuration reviews, and adversarial or red-team testing of AI models and pipelines, and documents test plans, test cases, and results.
- Works closely with vendors on outsourced solutions and reviews vendor recommendations and proposed solutions.
- Leads projects, processes, and cross-functional security workstreams by coordinating resources, influencing stakeholders, mentoring technical associates, and driving timely execution.

Nature and Scope

- Displays the highest level of critical thinking and analysis in bringing successful resolution to high-impact, complex, and/or cross-departmental problems. Makes prompt, sound decisions when faced with complex and often contradictory alternatives that result in successful outcomes.
- Operates with considerable latitude. Situations may have little or no precedent requiring original or new concepts or approaches without guidance from others. Reaches decisions under conditions of uncertainty.
- Develops or engages/directs others in developing innovative solutions to important, highly complex strategic and operating problems; cross-departmental considerations are often present.

Work Environment

- Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
- Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
- Typically requires overnight travel less than 10% of the time.

Education and Experience

- Typically requires a bachelor’s degree and 10+ years of experience in a related field OR MS/MA and generally 8+ years of experience in a related field. Maintains expert knowledge in area of responsibility with a strong understanding in adjacent areas for the development of creative solutions.

Preferred Qualifications

- Requires hands-on experience securing AI and machine learning systems, large language model (LLM) applications, AI workflows, and related production AI platforms.
- Requires clear written and verbal communication skills and the ability to influence technical and business stakeholders through transparent, service-oriented collaboration.
- Ten years of combined information security and information technology experience preferred.
- Hands-on experience with Databricks, CrowdStrike Falcon, Terraform or comparable infrastructure-as-code tools, Azure DevOps, GitHub, cloud security posture management technologies, and application security platforms preferred.
- Experience with LLM-assisted software development tools such as Claude, Copilot, and Cursor, as well as securing applications developed using AI-assisted code generation preferred.

If you’re looking to play a role in building America, consider one of our open opportunities. We can’t wait to meet you.