Principal Security Architect - GenAI and Emerging Technologies

Principal Security Engineer - IS06BE

We’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals – and to help others accomplish theirs, too. Join our team as we help shape the future.   

         

The Hartford’s Information Protection (THIP) organization is looking for talented professionals to join a high-performing team that is charged with designing, implementing and maintaining modernized and advanced information security capabilities.   As the Principal Security Architect, this position will set the security direction and requirements for the company’s secure use of AI / GenAI capabilities, while leading the charge in evaluating, recommending and helping implement new and emerging security capabilities.

This role reports directly to the Chief Information Security Officer (CISO) and is an essential leadership position that partners closely with other technology leaders, providing the right person the opportunity to help shape our future security practices. We are looking for a strong technical leader who is adept at charting future direction, passionate about security, and is committed to driving innovate solutions.

Responsibilities

As the Principal Security Architect for GenAI and Emerging Technologies, you’ll be responsible for:

• Partnering with key stakeholders and technology partners to provide leadership direction and support for our company’s continued GenAI priorities, bringing a security perspective that balances with business imperatives and delivery timeframes

• Designing and developing architectures, frameworks, and requirements for the secure consumption of AI / GenAI capabilities across various patterns and usages, including internally maintained models, as well as Software as a Service (SaaS) solutions

• Performing threat modelling and risk assessments against GenAI use cases, recommending security requirements, and monitoring adherence with guidance

• Working with development teams, data scientists and security professionals to design and implement security measures that protect AI models against various threats and vulnerabilities, including prompt injections, inference attacks, data poisoning, model thefts, and others

• Representing the organization in leadership discussions, risk governance councils, and various AI / GenAI working teams

• Leading the cybersecurity team’s efforts to continuously monitor, assess and evaluate emerging security technologies, partnering with the enterprise Innovation team to proactively identify and recommend potential new capabilities

This role will have a Hybrid work schedule, with the expectation of working in an office (Columbus, OH, Chicago, IL, Hartford, CT or Charlotte, NC) 3 days a week (Tuesday through Thursday). 

Qualifications

Candidates will be evaluated based on their ability to perform the duties listed above while demonstrating the skills and competencies necessary for the role. These skills and competencies include:

• Extensive (5+ years) experience as a security professional with a focus on Security Architecture responsibilities related to cloud security, threat modelling, identity and management and authentication, network security, software engineering, cryptography, penetration testing, mobile security, and/or infrastructure services

• Proficiency and working experience (2+ years) with AI, Machine Learning, and GenAI systems, including a deep understanding of the underlying architecture and technical capabilities

• Proven knowledge and understanding of the techniques and technologies for securing AI / GenAI models, including recent involvement with evaluating new technical solutions

• Past experiences with researching, assessing, and evaluating emerging technologies, including conducting proof-of-concept reviews for new and/or start-up solution providers

• Strong analytical mindset with a passion for driving innovative solutions, and an ability to clearly articulate potential risks while describing appropriate security measures

• Exceptional verbal and written communication skills that lend equally well for presenting to executives, management, and technical teams

• Bachelor's degree from an accredited college or university in computer science, information security, or related field

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Cloud and AI-specific certifications are highly desirable

Candidate must be authorized to work in the US