Lead AI Security Engineer

Established nearly two centuries ago, FM is a leading mutual insurance company whose capital, scientific research capability and engineering expertise are solely dedicated to property risk management and the resilience of its policyholder-owners. These owners, who share the belief that the majority of property loss is preventable, represent many of the world’s largest organizations, including one of every four Fortune 500 companies.

They work with FM to better understand the hazards that can impact their business continuity to make cost-effective risk management decisions, combining property loss prevention with insurance protection.

Schedule & Location
:
This is an onsite position based at our corporate headquarters in Johnston, RI, with the flexibility to work from home two days per week, depending on business needs.

Relocation is not offered for this position
.

Position Summary

The Lead AI Security Engineer is a senior technical role responsible for enabling the secure adoption of AI capabilities across the organization. This role defines and evolves security and risk requirements for enterprise AI capabilities, in addition to designing and implementing the supporting controls.

The role operates at the intersection of cybersecurity, platform engineering, and emerging AI technologies, supporting enterprise AI solutions such as Microsoft Copilot, Claude, and internally developed or platform-based agentic AI systems, including Azure AI Foundry.

The role translates emerging AI risks, security expectations, and enterprise requirements into clear, actionable, and scalable security patterns that can be consistently applied across platforms.

The incumbent serves as a hands-on technical leader and subject matter expert, partnering with platform, engineering, and product teams to design, evaluate, and implement security capabilities for AI systems, while establishing standards and guidance for ongoing operations.

In areas where security owns and administers the relevant controls, this role leads tool selection, control design, and implementation, with other teams potentially supporting day-to-day operations. In areas where security is not the system owner, this role consults with platform teams to ensure systems are configured and administered appropriately and effective security guidance is defined and applied.

Role Emphasis

• This is a hands-on leadership role for someone who can define the security model for enterprise AI, not just implementing requirements provided by others.

• The successful candidate should be able to identify AI-related security risks, develop clear requirements and guardrails, and help teams implement those controls in a practical and scalable way.

• The role requires strong security engineering judgment, practical AI understanding, and the ability to balance risk reduction with business enablement.

Key Responsibilities

• Lead the definition, design, and implementation of security capabilities that enable secure enterprise AI adoption across platforms such as Microsoft Copilot, Claude, and agentic AI frameworks.

• Define security and risk requirements for enterprise AI platforms and agent-based systems.

• Translate security, risk, and regulatory expectations, including emerging AI risks, into clear technical controls, guardrails, and implementation patterns aligned to relevant industry frameworks and enterprise requirements.

• Partner with AI platform, engineering, and product teams to embed security requirements and controls into architecture, design, delivery, and operations.

• Conduct security reviews and threat modeling for AI use cases, agent workflows, integrations, and platform capabilities to identify required controls before production deployment.

• Define and guide implementation of controls related to AI agent identity, tool and API access, data usage constraints, auditability, and agent behavior in enterprise environments.

• Lead evaluation, proof-of-concept, and selection of activities for native and third-party capabilities that support AI security, governance, and control objectives.

• Assess integration requirements across enterprise identity, logging, monitoring, data protection,…