Senior Security Engineer Platform AI Security

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.

The Senior Security Engineer, Platform Security Tooling & AI is a hands-on technical contributor embedded within the Platform Security team, responsible for the implementation, operationalization, and ongoing optimization of selected AI security technologies across CNA's enterprise. This role is the primary driver of moving AI security tools from selection through full production deployment - ensuring they are effectively integrated, adopted, and sustained within CNA's security ecosystem.

In addition to implementation ownership, this role leads comparative vendor analysis and technology vetting, delivering structured, evidence-based assessments that inform platform selection decisions. The Senior Security Engineer partners closely with the SOC, Threat Management, Detection Engineering, Security Advisory, Cloud Security, Application Security, IAM, and Data Security teams to ensure AI security platforms are operationalized in a way that is practical, scalable, and aligned with enterprise security objectives.

JOB DESCRIPTION:

Essential Duties & Responsibilities

Implementation & Operationalization

* Own the end-to-end implementation of selected AI security technologies, from deployment planning through production rollout and steady-state operations.

* Develop and execute operationalization plans for AI security platforms, including integration with existing security tools, workflows, and processes (e.g., SIEM, EDR, SOAR, PAM).

* Define and maintain operational runbooks, standard operating procedures, and configuration baselines for deployed AI security technologies.

* Partner with the SOC, Detection Engineering, and Threat Management teams to ensure AI security capabilities are fully utilized and tuned to CNA's environment.

* Oversee managed service partners and vendors supporting deployed platforms, holding them accountable to SLAs and quality standards.

* Monitor deployed platforms for performance, effectiveness, and emerging gaps, driving continuous improvement post-implementation.

Vendor Evaluation & Comparative Analysis

* Lead structured comparative analysis of candidate AI security technology vendors, evaluating solutions against defined security, operational, and business requirements.

* Develop and maintain evaluation criteria, scoring frameworks, and RFI/RFP documentation for AI security tooling.

* Design and execute hands-on proofs of concept, technical pilots, and benchmarking exercises to validate vendor claims and assess real-world fit.

* Produce clear, evidence-based vendor assessment reports with actionable recommendations for platform selection decisions.

* Track the AI security vendor landscape, emerging capabilities, and competitive developments to inform the team's long-term tooling roadmap.

Cross-Functional Collaboration & Enablement

* Serve as the Platform Security team's technical liaison to the AI Governance review process, providing the implementation and operationalization perspective on AI security initiatives.

* Partner with Risk, Legal, and AI Governance teams to ensure deployed AI security technologies meet compliance and regulatory requirements.

* Apply industry standards and frameworks (e.g., NIST AI RMF, MITRE ATT&CK, OWASP Top 10 for LLMs, MITRE ATLAS) to implementations and vendor evaluations.

* Mentor and support team members on AI security platform capabilities, implementation best practices, and operational procedures.

* Communicate implementation status, vendor findings, and platform health to leadership in clear, accessible terms.

Reporting Relationship

Typically reports to a Director; works in close coordination with the AI Security team, AI Governance, and other Security domain leads.

Skills, Knowledge & Abilities

* Deep working knowledge of enterprise security platforms including SIEM, EDR, SOAR, and PAM technologies, with hands-on experience implementing and operationalizing these tools at…