Lead Cybersecurity Threat and Vulnerability Analyst

Important Application Submission Information

In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Saturday, September 19, 2026

More than a career - a chance to make a difference in people's lives.

Build an exciting, rewarding career with us - help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

The Lead Cybersecurity Threat and Vulnerability Analyst serves as the technical lead for Duke Energy's emerging AI Attack Surface Management capability. This role is responsible for identifying, assessing, prioritizing, and mitigating risks associated with the use, development, deployment, and operation of Artificial Intelligence technologies across the enterprise. This position is expected to dedicate the majority of its focus to Artificial Intelligence security initiatives, including both the secure adoption of AI technologies and the assessment and management of risks associated with AI systems.

• Serve as the cybersecurity subject matter expert for AI technologies deployed across the enterprise.
• Develop and mature AI Attack Surface Management capabilities, including discovery, inventory, monitoring, assessment, and prioritization of AI-related risks.
• Evaluate risks associated with AI applications, AI agents, Large Language Models (LLMs), Retrieval Augmented Generation (RAG) implementations, third-party AI platforms, and AI-enabled business processes.
• Assess security threats including prompt injection, model manipulation, insecure integrations, excessive permissions, data leakage, unauthorized AI use, and AI supply chain risks.
• Partner with AI Governance, Cyber Architecture, Enterprise Architecture, and Technology teams to establish security requirements, standards, and controls for AI deployments.
• Support architecture reviews and risk assessments for emerging AI initiatives.
• Monitor evolving AI threats, vulnerabilities, attack techniques, and industry best practices.
• Develop executive-level reporting and risk communication related to AI security posture.

• Identify opportunities to leverage Artificial Intelligence and automation to improve cybersecurity operations.
• Drive adoption of AI-enabled capabilities that improve vulnerability prioritization, attack surface visibility, ownership identification, remediation workflows, and security analytics.
• Support development and enhancement of advanced security capabilities including risk-context engines, automated analysis pipelines, and intelligent security workflows.
• Evaluate emerging AI security technologies and identify opportunities to improve cybersecurity effectiveness and operational efficiency.
• Validate AI-driven recommendations and outputs to ensure alignment with enterprise risk management and cybersecurity requirements.
• Develop performance metrics demonstrating measurable reductions in manual effort, improved prioritization accuracy, and accelerated remediation outcomes.

• Support the evolution of Duke Energy's Attack Surface Management program across Internal, External, and AI Attack Surfaces.
• Apply threat intelligence, exposure context, business criticality, and exploitability data to improve risk prioritization.
• Support continuous validation initiatives and exposure management improvements.
• Provide expertise in vulnerability management, threat intelligence, application security, cloud security, and emerging technology risk as they relate to AI adoption.
• Assist…