Security Specialist Senior — Vulnerability Management AI Analyst

Job Posting End Date
06-08-2026

Please note the job posting will close on the day before the posting end date.

Job Summary Responsible for moderate-scale security assignments with limited direction from senior team members. Develops and maintains necessary documentation of security systems, projects, and/or processes to ensure unified understanding of system details. Performs and analyzes security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Identifies and documents potential mitigations/remediations and creates reports of findings with identified risk response.

Participates in the review, evaluation, and recommendation of emerging security technologies. More involved in advanced level implementation, support, and/or usage of technical solutions. Assists with problem solving, decision-making, and functional area knowledge.

Job Description

What you’ll do:

Essential Job Functions & Tasks Serve as the senior architect for artificial intelligence capabilities within AEP's Cybersecurity Vulnerability Management program, building and maturing the use of AI across vulnerability identification, analysis, dispositioning, and tracking.

Sit within the Vulnerability Analysis sub-team and partner with the Analysis Lead to integrate AI-assisted analysis into the team's day-to-day workflow.

Design, build, deploy, and maintain AI agents, pipelines, and prompts that automate inventory normalization, vulnerability-to-product matching, exploit and threat intelligence enrichment, and risk-based triage across a large enterprise asset inventory.

Lead the AI pipeline supporting the team's threat intelligence workflow, including automated daily sweeps of public vulnerability feeds, vendor security advisories, and exploit intelligence sources; produce AI-generated threat intelligence reports for the team and stakeholders.

Drive AI capabilities supporting AEP's response to the rising volume of zero-day vulnerabilities, including AI-assisted priority triage, vulnerability-to-asset-to-owner chain automation, and progression toward a Residual Risk Model that moves the program beyond CVSS-only scoring.

Develop and maintain Python-based AI workflows that interact with Anthropic Claude in an approved secure cloud environment and with Microsoft Copilot, evaluating additional AI tools and platforms as the program matures.

Establish AI engineering practices for the team, including prompt design, agent orchestration, retrieval-augmented generation against AEP-specific data, evaluation and quality assurance of AI output, version control, and responsible-use guardrails.

Plan for and contribute to the design of dedicated server infrastructure required to run AEP's vulnerability management AI workloads at scale, partnering with internal architecture and engineering teams.

Train and upskill Vulnerability Management team members on how to use, validate, and challenge AI-generated results; create written documentation, runbooks, and reference materials that allow analysts at varying skill levels to operate AI tooling consistently.

Build and maintain strong working relationships with AEP's Operational Technology (OT) partners to ensure AI-driven analysis of OT-adjacent vulnerabilities is accurate, contextual, and supports — rather than disrupts — generation, transmission, and distribution operations.

Collaborate with peers across the Vulnerability Management program to ensure AI inputs (scan data, inventory, exploit intelligence) and outputs (matches, triage, reports) flow cleanly between identification, analysis, dispositioning, and tracking functions.

Communicate AI methodology, limitations, and results clearly to peers, leadership, business partners, and executive audiences, including translating model behavior and confidence into business-relevant language.

Stay current with emerging AI capabilities, model releases, and prompt engineering practices, evaluating where new techniques can improve accuracy, reduce analyst toil, or expand the program's coverage.

Maintain awareness of NERC CIP regulatory requirements as AI workflows interact…