AI Runtime & Trust Security Advisor II

Available in 3 locations

Available in 3 locations

AI Runtime & Trust Security Advisor II

Available in 3 locations

Berkeley Heights, New Jersey, United States of America

Alpharetta, Georgia, United States of America

Columbus, Ohio, United States of America

Job ID: R-10398811

Category: Other

Onsite

Posting Start Date: Posting Start Date: 05-August-2026

Posting End Date: Posting End Date: 25-August-2026

Calling all innovators - find your future at Fiserv.

We’re Fiserv, a global leader in Fintech and payments, and we move money and information in a way that moves the world. We connect financial institutions, corporations, merchants and consumers to one another millions of times a day - quickly, reliably, and securely. Any time you swipe your credit card, pay through a mobile app, or withdraw money from the bank, we’re involved. If you want to make an impact on a global scale, come make a difference at Fiserv.

Job Title

AI Runtime & Trust Security Advisor II

About your role

The AI Runtime & Trust Security Advisor II helps lead the security of AI in production — both what deployed AI does and what it is allowed to do — detecting AI-specific threats such as prompt injection, jailbreaks, and inference-time data exfiltration while helping govern identity, authorization, and secrets for AI systems and agents. The role leverages AI protection tooling along with building detection in-house: commercial AI observability and guardrail platforms (e.g., Arize, Fiddler), data security posture management for AI (e.g., Varonis), and the enterprise SIEM/SOAR, IAM, and secrets stack. Sitting within Cybersecurity, this role helps lead a cross-functional model that connects Cyber’s services with the SOC, IAM, Data Governance, and platform teams as Fiserv scales AI in production.

What you’ll do

• Lead operationalizing runtime monitoring, guardrails, and model-integrity checks for production AI workloads using commercial AI observability and guardrail platforms — detecting prompt injection, jailbreaks, model abuse, drift, and anomalous inference, and tuning thresholds and alert quality.
• Serve as the primary SOC liaison for AI security events — providing platform context, triage support, and expertise on AI-specific attack patterns general SOC analysts may not recognize — and help maintain AI-specific incident response playbooks.
• Help lead the enterprise authorization model for agentic AI — partnering with IAM and the AI Center of Excellence to define what agents may do, on behalf of whom, with what tool scope and duration — and help extend the identity fabric to AI agents as first-class principals (workload identity standards such as SPIFFE/SPIRE, OIDC).
• Operate identity anomaly detection and policy enforcement for AI workloads and agents, adjudicating scope violations and out-of-scope tool calls.
• Help lead data security posture for AI in partnership with Data Governance — operating DSPM tooling (e.g., Varonis, Cyera, or equivalent) to detect and reduce over-permissioned data exposure to copilots and agents, and responding to AI data-exposure findings.
• Partner with the Cloud and platform teams to define and operate secrets hygiene and network egress controls for AI workloads, particularly agent tool-call boundaries and model API access.
• Adjudicate novel authorization requests and escalations that require human judgment on risk tolerance, and lay the groundwork for a future automation layer as the program matures.
• Responsibilities listed are not intended to be all-inclusive and may be modified as necessary.

Experience you’ll need to have

• 7+ years in security engineering spanning at least two of: AI/ML runtime security, security operations and detection engineering, and identity / trust engineering.
• Hands-on familiarity with AI attack patterns: prompt injection, jailbreaks, model inversion, and inference-time data exfiltration.
• Experience operating commercial AI observability and/or guardrail platforms (Arize, Fiddler, or equivalent) and SIEM/SOAR (Splunk, Microsoft Sentinel, Chronicle, or equivalent).
• Direct experience securing non-human and service identities, including workload identity standards (SPIFFE/SPIRE, OIDC) and authorization policy engines (Open Policy Agent, Cedar).
• Working knowledge of data security posture management (Varonis, Cyera, BigID, or equivalent) and secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).
• Comfort partner…