AI Cyber Lead

At Richemont Americas, we aspire to reflect the ever-changing world around us. We are proud to employ talent from many different backgrounds, experiences, and identities to build a continually evolving, inclusive community where the diversity of our colleagues and clients is rich and celebrated. We believe when inclusion is fully embraced and empowered, creativity and knowledge emerge to deliver excellence, advancing the community that is uniquely Richemont Americas.

Richemont Group - Cyber| New York, NY

Reports to:

Senior Manager Incident Response

The Senior AI Cyber Lead serves as the primary technical and strategic expert and point of reference for AI-driven security capabilities within the CSIRT. This senior individual contributor role drives the design, development, and operationalization of agentic AI solutions across security platforms and processes—from Cortex XSIAM and related cybersecurity tools to broader detection, investigation, and incident response workflows. Acting as the key bridge between the CSIRT and Threat Hunting, Threat Intel, Red Team, Forensics, and Group Security Technology teams, the role ensures AI innovations are securely configured, integrated, scaled effectively, and aligned with enterprise security strategy while elevating the team’s overall AI maturity in complex, scattered environments.

• Serve as the main technical point of reference and subject-matter expert for all AI development efforts within the CSIRT, partnering with analysts and engineers on best practices for agentic AI, LLM integration, RAG pipelines, secure automation, and AI governance in security operations.
• Lead the design, prototyping, and implementation of AI-powered enhancements spanning Cortex XSIAM (including AI Smart Scoring, technique-based incident grouping, and SOAR playbooks) and other security platforms, focusing on automated incidents triage and enrichment, threat hunting, investigation assistance, and response orchestration to deliver measurable reductions in CSIRT KPIs (MTTx).
• Architect and operationalize agentic AI systems and workflows that improve SOC efficiency, reduce mean time to detect and respond, and support complex incident response processes while embedding robust guardrails, human-in-the-loop controls, auditability, least-privilege principles, and secure-by-default patterns aligned with enterprise risk and regulatory requirements based on local markets (e.g. China, Korea).
• Act as the primary liaison and technical bridge between the CSIRT and other teams (including Threat Hunting, Threat Intel, Red Team, Forensics, and Group Security Technology), translating operational needs into AI solutions, aligning roadmaps, and ensuring consistent, secure adoption of AI capabilities across platforms and processes.
• Should own the expertise to identify high-impact AI use cases, conduct threat modeling for AI systems (including prompt injection, tool-use risks, data exposure, autonomous agent behaviors, and identity/security posture risks), and drive continuous improvement of AI-enabled defenses.
• Evaluate emerging market solutions, frameworks, and techniques in agentic AI for SOCs and incident response; pilot promising technologies; and contribute to the definition of secure-by-default patterns, reference architectures, and operational standards for AI in security, including alignment with relevant regulatory frameworks inside the company (AI council).
• Support knowledge sharing, mentorship to SOC analysts, and documentation of agentic developments, safe prompt libraries, evaluation frameworks, and best practices to accelerate responsible AI adoption and elevate AI maturity across the team.
• Generate periodic reports, metrics, and insights on AI…