MetLife

Position Summary;

This role serves as a key member of the AI security team, within Information Security, focusing on security controls for the generative AI environments along with cloud platforms. The primary focus will be securing cloud and AI technologies, ensuring systems are properly implemented, appropriate processes are developed, and daily monitoring and alerts are managed.  This role must have a strong understanding of, and experience with, various IaaS, PaaS, and SaaS platforms using Artificial Intelligence, Machine learning and Large language models (LLMs) , identifying and eliminating risks in these environments.

Key Responsibilities: 

• Defining security controls for implementation of platforms using AI/ML using a combination of Cloud native and On-Premise Security tools and applications.
• Conducting security reviews and recommendation for IaaS, PaaS, & SaaS Cloud environments
• Developing Cloud Security requirements documentation for IaaS, PaaS and CaaS environments.

• Defining Network Security and Encryption evaluation and recommendations for complex infrastructure.
• Designing and implementing controls with Microsoft Defender suite, AWS security hub, Google Cloud Security command center and equivalent security tools.
• Securing Containerized environments and ability to identify security vulnerabilities . 
• Interfacing with vendors to ensure the appropriate tools, configurations, and workflows are in place

• Developing data protection proposals using Data loss prevention (DLP), Data discovery / classification, and digital rights management (DRM) tools.
• Essential Business Experience and Technical Skills:

  Required: 

  • 1+ years of experience with AI/ML technologies and experience implementing security controls to monitor and secure platforms using these technologies.
  • 1+ years of experience with Google Cloud, Microsoft Azure and AWS Infrastructure as a Service and Platform as a Service environments. Awareness of Data Sovereignty and privacy controls around the world and ability to translate that to security control that can be applied in the Public cloud environments.
  • 1+ years of Experience with Cloud native security controls in different Cloud environments.
  • At least 4 years of experience with Data Loss Prevention tools for Website uploads, Endpoint Data Loss Prevention and Network Data Loss Prevention. 
  • Minimum of 1 year working on security tools for Containers and microservices environments. 
  • At least one Industry recognized cloud security certification (CCSP, CCSK, CCC-PCS, etc.)
  • Bachelor’s degree in technology or related field required and Minimum of 6+ years in different information Security domains or no degree and 10+ years' experience.  
  • Preferred:
    • Industry recognized information security certification are preferred (CISSP).
    • 1 Year of Experience with Cloud Access Security Broker Tools like Bitglass, Netskope or M-Vision (Skyhigh) for Data Loss Prevention for SaaS based applications.
    • Strong ability to communicate to stakeholders with various levels of expertise 
    • Strong record of success in supporting large scale programs, preferably in a global organization. 
    • Excellent verbal and written communication skills