Senior AI Information Security Engineer

The Senior AI Engineer will lead the design, development, and deployment of agentic AI systems and secure AI capabilities across the enterprise. Reporting to the Global CISO, this role owns hands-on development of AI agents, automation pipelines, and LLM-based workflows while ensuring they meet security, compliance, and governance requirements. The engineer will partner with Information Security, Legal, Compliance, Privacy, IT, and Engineering to take AI use cases from concept to production., Agentic AI Development

• Design, build, and own production-grade agentic AI systems - including multi-step agents, tool-using LLM pipelines, retrieval-augmented generation (RAG) workflows, and automated decision-making systems.
• Develop and maintain the company’s internal agentic AI platform, including agent orchestration, memory management, tool integrations, and human-in-the-loop review workflows.
• Identify high-value agentic use cases across business functions and deliver working solutions end-to-end, from requirements through deployment and monitoring.
• Establish guardrails, safety patterns, and evaluation frameworks for agentic systems, including output validation, escalation logic, and auditability.

AI Security Engineering

• Implement and maintain security controls for AI tools and workflows: data handling, access controls, logging, monitoring, prompt injection mitigations, and acceptable-use enforcement.
• Perform security reviews and threat modeling for LLM integrations, agentic workflows, APIs, and third-party AI/SaaS solutions.
• Identify and mitigate AI-specific risks: sensitive data exposure, over-permissioned agents, insecure tool use, supply-chain exposure, and inadequate human oversight.
• Support AI governance and compliance activities with technical guidance, architecture input, and implementation evidence.

Security Engineering & Automation

• Develop scripts, integrations, and lightweight applications using Python, PowerShell, REST APIs, and workflow automation platforms.
• Build and maintain SIEM detections, SOAR playbooks, dashboards, and reporting capabilities, including telemetry for AI-enabled workflows.
• Engineer security improvements across identity, cloud, SaaS, endpoint, and data protection domains.
• Respond to security incidents involving AI tools, data exposure, and automation failures.

Collaboration & Governance

• Translate business and control objectives into secure AI designs, prototypes, and production capabilities.
• Manage and communicate project status, risk decisions, and implementation progress to stakeholders.
• Maintain standard operating documentation for knowledge transfer, audit readiness, and disaster recovery.

• Agentic AI development: agent frameworks (e.g., LangChain, AutoGen, CrewAI), LLM APIs, tool use, RAG, vector databases, prompt engineering, and safety guardrails.
• Python development, REST APIs, and workflow automation; scripting in PowerShell or similar.
• Security architecture across identity, cloud, SaaS, endpoint, network, application, and data protection.
• SIEM management, log onboarding, detection engineering, and alert tuning.
• SOAR platforms, ticketing integrations, and automated playbook development.

Preferred

• Cloud and SaaS security: identity providers, CASB/SSE, DLP, key/secrets management.
• Application and API security, vulnerability scanning, DevSecOps, and secure SDLC.
• AI security and governance: NIST AI RMF, OWASP LLM Top 10, model risk, auditability, and policy enforcement.
• SIEM/SOAR platforms, endpoint security, web application firewalls, and threat intelligence tooling.
• ISO 27001, NIST CSF, privacy frameworks, and common risk management terminology., * Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Data Science, or equivalent experience.
• 5+ years in cybersecurity, security engineering, application security, or a related field.
• 3+ years in security operations, security engineering, DevSecOps, or cloud security.
• 2+ years of hands-on AI/ML development, agentic systems, automation, or data engineering.
• Demonstrated ability to deliver cross-functional technical projects end-to-end.

Certifications (Preferred)

• CISSP, CISM, or CISA.
• SANS GIAC (cloud, incident response, application security, or automation focus).
• Cloud security certifications (CCSK, CCSP, or major cloud provider).
• AI governance, ML security, or secure software development coursework or certification.

Work Environment

Office, remote, or hybrid as assigned. Occasional participation in incident response, change windows, or project activities outside standard business hours may be required.

$170,000-$180,000. The total compensation package for this position may also include applicable incentive compensation, such as an annual, The targeted pay range for this role is $170,000-$180,000. The total compensation package for this position may also include applicable incentive compensation, such as an annual performance bonus. Actual compensation packages are based on several factors that may include, but are not limited to skill set, depth of experience, specific work geography, as well as internal equity and alignment with market data.

Light & Wonder and its affiliates (collectively, “L&W”) are engaged in highly regulated gaming and lottery businesses. As a result, certain L&W employees may, among other things, be required to obtain a gaming or other license(s), undergo background investigations or security checks, or meet certain standards dictated by law, regulation, or contracts.In order to ensure L&W complies with its regulatory and contractual commitments, as a condition to hiring and continuing to employ its employees, L&W requires all its employees to meet those requirements that are necessary to fulfill their individual roles. As a prerequisite to employment with L&W (to the extent permitted by law), you shall be asked to consent to L&W conducting a due diligence/background investigation on you.

This job description should not be interpreted as all-inclusive; it is intended to identify major responsibilities and requirements of the job. The employee in this position may be requested to perform other job-related tasks and responsibilities than those stated above.