Distinguished Engineer – AI Security

Job description

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger �� helping to simplify health care one person, one family and one community at a time. Position SummaryThis is a highly technical individual contributor role. The Distinguished Engineer is expected to serve as a technical authority and trusted advisor for AI security and related infrastructure security domains.This role is expected to dedicate significant time to hands-on engineering, including building reusable security patterns, reference architectures, and proof-of-concept implementations for AI systems and the platforms that support them. In parallel, the role provides expert governance, architectural guidance, and technical oversight to ensure secure, scalable, and compliant AI adoption across the enterprise.The Distinguished Engineer will work closely with cross-functional partners to embed security into the AI lifecycle—from data and model development through deployment and operations—while helping shape enterprise strategy and standards based on real-world engineering outcomes.Key Responsibilities AI Security Leadership (Primary Focus)• Define and help execute the enterprise AI security strategy, spanning secure model selection, development, and deployment criteria, adversarial threat mitigation, and alignment with emerging AI governance requirements.• Design, build, and maintain reusable AI security frameworks, reference patterns, and technical standards for model integrity, secure data pipelines, and privacy-preserving machine learning.• Perform hands-on security assessments of AI systems, identify risks, and provide mitigation guidance based on AI security posture management and detection findings.• Drive innovation in AI security techniques, controls, and tooling through applied research and practical implementation.• Apply and guide the application of AI security frameworks such as MITRE ATLAS, NIST RMF, and emerging ISO/IEC AI standards to secure the end-to-end AI lifecycle.Infrastructure Security Expertise (Secondary Focus)• Apply Zero Trust principles to hybrid and cloud infrastructure environments supporting AI workloads, including workload identity, segmentation, and continuous verification.• Partner closely with Enterprise Architecture and Platform Engineering to integrate AI security controls into infrastructure design patterns and shared services.• Guide and, where appropriate, directly implement security capabilities across on-premises and cloud platforms to ensure consistent protection for AI and traditional systems.Strategic Engineering Responsibilities• Hands-on Engineering & Prototyping: Design and build proof-of-concept solutions, reference implementations, and reusable components to validate AI security and infrastructure security approaches. Provide ongoing technical support to teams implementing enterprise patterns and components.• Framework and Pattern Development: Architect repeatable security patterns and guardrails that can be adopted by data science, engineering, and platform teams.• Technology Evaluation: Research emerging AI and infrastructure security technologies to assess enterprise applicability and maturity. Ensure that enterprise components and solution architectures leverage the best commercial and open-source software and services available, and that the resulting AI security stack is minimally complex and massively scalable and economic.• Technical Innovation: Translate emerging threats, research, and regulatory guidance into practical, actionable engineering solutions.Governance, Advisory, and Oversight Responsibilities• Provide expert design reviews and technical oversight for AI systems, platforms, and infrastructure architectures.• Define and evolve AI security and infrastructure security standards in partnership with governance stakeholders.• Advise on security-related business cases and strategic investments for AI platforms and capabilities.• Serve as a trusted advisor and mentor to security, platform, and engineering teams on AI security best practices.• Advise on enterprise response to emerging AI security threats.Cross Functional-Functional Collaboration & Stakeholder EngagementThis role collaborates closely with key partners across the organization, including but not limited to:• Data Science & Machine Learning Engineering: Embedding security into model development, evaluation, and deployment workflows.• Platform, Cloud, and Infrastructure Engineering: Securing AI platforms, pipelines, and runtime environments.• Legal, Privacy, and Compliance: Ensuring alignment with regulatory, privacy, and contractual requirements for AI systems and data usage.• Enterprise Architecture: Aligning AI security patterns with broader enterprise technology and architecture standards.• Risk Management and Audit: Supporting risk assessments, control validation, and audit readiness for AI-enabled systems.• Application Development / Application Security: Partner with Application Security to provide technical support and guidance to embed security in AI development pipelines.Additional Strategic and Leadership Responsibilities• Set and guide technical direction for AI security and adjacent infrastructure security domains based on hands-on engineering insight.• Influence enterprise technology strategy for secure AI adoption through thought leadership and practical guidance.• Contribute to industry and internal thought leadership through publications, presentations, patents, or standards.• Influence key technology partners and solution providers to ensure that their solutions comply with CVS Health AI Security standards.Required Qualifications• AI Security Frameworks: MITRE ATLAS, NIST RMF, ISACA AI Audit Too