The GenAI Security Program at Optum is dedicated to safeguarding data, mitigating risks, and promoting responsible AI usage across the enterprise. The job is to ensure the secure deployment of Generative AI technologies by aligning with established security policies, regulatory requirements, and industry best practices, providing governance, oversight, and technical controls to support safe and effective AI adoption throughout the organization.
Requirements
- Proven experience in cybersecurity, including threat detection, incident response, and vulnerability management
- Familiarity with frameworks like NIST AI RMF, OWASP AI Security, and MITRE ATLAS
- Understanding of supervised, unsupervised, and reinforcement learning models
- Experience with tools like TensorFlow, PyTorch, HuggingFace Transformers, and scikit-learn
- Knowledge of adversarial AI threats, model inversion, data poisoning, and secure model lifecycle management
- Familiarity with AI-specific security tools and workflows (e.g., AI UEBA, threat triage bots, Graph API consent automation)
- Fluency in Python and SQL
Responsibilities
- Process secure access requests and ServiceNow tickets with accuracy and adherence to SLAs
- Create and manage change requests, ensuring correct configuration details, especially for proxy-related changes
- Coordinate with technical teams to ensure seamless execution of change requests and incident resolutions
- Maintain awareness of access management and security governance requirements
- Ensure change requests are properly categorized and documented for audit readiness
- Assess AI model risks, bias, and explainability (XAI)
- Experience in red teaming and vulnerability testing for AI systems
Other
- Host regular office hours to assist internal customers and respond to general inquiries
- Maintain, update, and organize documentation to ensure consistency and compliance with internal standards
- Meet with customers to clearly communicate program policies, processes, and expectations
- Ability to stay current with emerging threats and evolving AI technologies
- Solid written and verbal communication skills to articulate risks, mitigation strategies, and technical concepts to diverse stakeholders
- Experience contributing to governance frameworks, OKRs, and cross-functional working sessions
- Candidates are required to pass a drug test before beginning employment.
