Distinguished Engineer, AI Threat Defense

About The Role Thomson Reuters is enhancing its Cyber Defense capability in response to an AI-driven threat landscape that has fundamentally changed the speed, scale, and nature of cyberattacks.

The Distinguished Engineer, AI Threat Defense is a senior individual contributor and technical authority within the Cyber Defense organization. Reporting to the VP of Cyber Defense, this role will shape how Thomson Reuters anticipates, detects, investigates, and responds to threats affecting AI-enabled products, services, and enterprise operations.

This is a highly influential, hands-on technical role with no direct reports. You will lead through engineering depth, sound judgment, architecture, collaboration, and mentorship—working across SOC Operations, CIRT, Threat Detection Engineering, Vulnerability Management, Attack Surface Reduction, Cyber Threat Management, Product Engineering, Security Engineering & Architecture, and AppSec.

Rather than creating a separate AI security function, you will evolve core Cyber Defense capabilities to address AI-specific threats and responsibly apply AI across established detection, investigation, and response processes.

What You’ll Do

• Set the technical direction for AI threat defense across Thomson Reuters, ensuring AI-specific risks are addressed through the organization’s core cyber defense strategy, architecture, engineering practices, and operating model.
• Define how the organization monitors, detects, investigates, and responds to attacks involving AI-enabled products, LLM applications, agentic workflows, models, AI infrastructure, and associated integrations.
• Develop defensive approaches for AI-specific threats, including prompt injection, jailbreaks and guardrail bypass, sensitive-information and system-prompt disclosure, unsafe downstream execution, excessive agent autonomy, unauthorized tool use, MCP exploitation, model and data poisoning, AI supply-chain compromise, model denial-of-service and denial-of-wallet attacks, model, prompt, and intellectual-property theft, and deepfake-enabled social engineering.
• Partner with Product Engineering, Security Engineering & Architecture, and AppSec to establish secure, observable, and defensible patterns for AI-enabled applications, services, infrastructure, agents, and tool-use workflows.
• Ensure AI security requirements, meaningful telemetry, and response readiness are designed into the software development lifecycle and production operating environment.
• Strengthen existing security telemetry, detection engineering, monitoring, incident investigation, and response practices to identify and contain AI-related threats effectively.
• Architect the responsible use of AI within the existing 24/7 SOC and CIRT operating model to improve triage, investigation, decision-making, response execution, and analyst effectiveness.
• Develop detection content, security analytics, investigation methods, playbooks, and response workflows that enable SOC and CIRT teams to investigate and respond to AI-related security events.
• Maintain appropriate human oversight, evidence quality, auditability, safeguards, and rollback mechanisms as AI capabilities are adopted within Cyber Defense operations.
• Track emerging offensive AI capabilities, adversary tooling, threat-actor adoption, AI vulnerability research, and changes in the broader threat landscape, translating findings into practical defensive improvements.
• Provide technical leadership and mentorship across Cyber Defense, raising organizational capability in AI security, detection engineering, threat analysis, and incident response.
• Influence technical decisions through architecture reviews, technical standards, direct engineering collaboration, design guidance, and clear communication with technical and executive stakeholders.
• Represent Thomson Reuters in relevant customer discussions, industry groups, regulatory engagements, and AI security communities.

About You You are a deeply technical cybersecurity leader who can operate at a Distinguished Engineer level without relying on formal organizational authority. You enjoy solving ambiguous, high-impact problems, establishing technical direction, and turning complex security challenges into scalable, durable capabilities.

You combine strong cyber defense expertise with a practical understanding of AI-enabled systems and how they are deployed, monitored, secured, and attacked. You can work comforta…