Principal AI Security

• The Principal, AI Security Architecture & Engineering serves as Itron’s senior technical authority for AI security
• This highly visible, hands-on leadership role is responsible for defining and implementing the security architecture, governance controls, engineering standards, and operational practices that enable safe, scalable adoption of artificial intelligence, generative AI, machine learning, and AI agents across the enterprise and product portfolio
• The ideal candidate combines deep cybersecurity expertise with practical experience securing modern AI ecosystems, including autonomous and semi-autonomous agents, large language models, AI platforms, model gateways, non-human identities, and data access controls
• This individual will partner closely with Information Security, Product Security, Legal, Privacy, Engineering, Cloud Operations, Enterprise Architecture, Infrastructure, and business leaders to help drive innovative AI capabilities while protecting customers, products, data, and intellectual property
• Define and lead Itron’s enterprise AI security strategy, architecture, policies, standards, reference architectures, and multi-year roadmap
• Design and implement security controls across the AI and agent lifecycle, including registration, inventory management, identity governance, credential protection, authorization boundaries, autonomy controls, human oversight checkpoints, memory isolation, and agent decommissioning
• Establish scalable security guardrails for generative AI platforms, model integrations, APIs, plugins, automation workflows, AI assistants, and emerging agentic ecosystems
• Develop and maintain governance controls supporting privacy, confidentiality, data protection, transparency, explainability, accountability, ethical AI use, and bias mitigation
• Lead AI-focused threat modeling, adversarial testing, security reviews, and risk assessments for enterprise and customer-facing solutions
• Evaluate and mitigate emerging AI threats, including prompt injection, tool misuse, privilege escalation, AI supply chain compromise, context poisoning, insecure agent interactions, and rogue agent behavior
• Partner with engineering, product, and architecture teams to embed secure-by-design principles into the development, deployment, testing, and operation of AI-enabled systems
• Advance the use of AI within Cybersecurity by designing and piloting AI-assisted capabilities that improve detection engineering, threat hunting, vulnerability management, alert triage, evidence collection, and operational effectiveness
• Define security logging, telemetry, monitoring, alerting, and reporting requirements that measure AI control effectiveness and detect anomalous or malicious activity
• Develop and operate AI Security Posture Management capabilities, including inventories, risk assessments, third-party evaluations, incident response processes, compliance readiness, and ongoing monitoring
• Conduct security assessments of AI vendors, platforms, and service providers with emphasis on architecture, data handling, privacy, access controls, resiliency, and operational risk
• Provide technical leadership and guidance for AI-related incidents, investigations, governance decisions, policy exceptions, and risk acceptance reviews
• Author clear technical standards, reference architectures, implementation guidance, and executive communications that enable responsible and secure AI adoption
• Mentor engineers, architects, and security practitioners while fostering a collaborative, customer-centric culture that balances innovation with risk management
• Stay current on evolving AI technologies, industry regulations, attack techniques, and emerging security best practices, translating insights into actionable improvements for Itron

Benefits

• Paid maternity & paternity leave
• Paid holidays & sick time
• Volunteer time off
• Flexible time off
• Wellness reimbursement
• Mental health benefit
• Casual dress- Strong understanding of authentication, authorization, least privilege, secure software design principles, and modern security architectures
• Experience implementing security controls for cloud platforms, APIs, identity services, secrets management, data protection, logging, monitoring, and third-party integrations
• Demonstrated ability to operate effectively across diverse teams while driving accountability, collaboration, and execution in a fast-changing technology environment
• Exceptional written, verbal, facilitation, and stakeholder-management skills
• 2+ years of experience working with AI-enabled systems, machine learning environments, automation platforms, advanced analytics solutions, or generative AI technologies
• Ability to analyze complex AI and cybersecurity risks and communicate practical recommendations to both technical and business leaders
• Demonstrated hands-on experience securing or building agentic systems, AI orchestration platforms, non-human identity solutions, model integrations, retrieval pipelines, and automated workflows
• 7+ years of experience in cybersecurity, security architecture, cloud security, identity and access management, application security, product security, or a related technical discipline
• Proven experience conducting threat modeling, architecture reviews, security assessments, control validations, and cyber risk evaluations
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent combination of education and experience
• If you are excited about this role but your past experiences don’t perfectly align with every requirement, we encourage you to apply anyway
• Background in secure software development, DevSecOps, CI/CD security, container security, software supply chain security, or product security architecture reviews
• Hands-on experience with Microsoft Foundry Agent Service, Model Context Protocol (MCP) implementations, AI gateway technologies, GitHub Copilot, Microsoft 365 Copilot, Vertex AI, Databricks AI capabilities, ChatGPT Enterprise, or similar platforms
• Experience performing AI red teaming, adversarial testing, prompt injection testing, abuse-case development, or AI deployment readiness assessments
• Professional certifications such as CISSP, CCSP, CSSLP, Microsoft Security certifications, cloud security certifications, AI governance certifications, AI security certifications, or equivalent credentials
• Experience securing large-scale deployments of frontier AI models through direct provider APIs, Microsoft Foundry, Amazon Bedrock, model gateways, or comparable enterprise AI platforms
• Familiarity with AI security and governance frameworks such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, ISO/IEC 42001, and AI regulatory readiness initiatives
• Experience operating in regulated industries or environments aligned to ISO 27001, SOC 2, NIST, GDPR, CMMC, critical infrastructure, utilities, or similar compliance frameworks