# Distinguished Engineer, AI Threat Defense **Company**: Thomson Reuters **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Category**: Security **Industry**: Technology **Apply**: https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/United-States-of-America-Eagan-Minnesota/Distinguished-Engineer--AI-Threat-Defense_JREQ202811-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_c211a0b9-c92 ## Description Thomson Reuters is enhancing its Cyber Defense capability in response to an AI-driven threat landscape that has fundamentally changed the speed, scale, and nature of cyberattacks. The Distinguished Engineer, AI Threat Defense is a senior individual contributor and technical authority within the Cyber Defense organization. Reporting to the VP of Cyber Defense, this role will shape how Thomson Reuters anticipates, detects, investigates, and responds to threats affecting AI-enabled products, services, and enterprise operations. **Responsibilities** - Set the technical direction for AI threat defense across Thomson Reuters, ensuring AI-specific risks are addressed through the organization's core cyber defense strategy, architecture, engineering practices, and operating model. - Define how the organization monitors, detects, investigates, and responds to attacks involving AI-enabled products, LLM applications, agentic workflows, models, AI infrastructure, and associated integrations. - Develop defensive approaches for AI-specific threats, including prompt injection, jailbreaks and guardrail bypass, sensitive-information and system-prompt disclosure, unsafe downstream execution, excessive agent autonomy, unauthorized tool use, MCP exploitation, model and data poisoning, AI supply-chain compromise, model denial-of-service and denial-of-wallet attacks, model, prompt, and intellectual-property theft, and deepfake-enabled social engineering. - Partner with Product Engineering, Security Engineering & Architecture, and AppSec to establish secure, observable, and defensible patterns for AI-enabled applications, services, infrastructure, agents, and tool-use workflows. - Ensure AI security requirements, meaningful telemetry, and response readiness are designed into the software development lifecycle and production operating environment. - Strengthen existing security telemetry, detection engineering, monitoring, incident investigation, and response practices to identify and contain AI-related threats effectively. - Architect the responsible use of AI within the existing 24/7 SOC and CIRT operating model to improve triage, investigation, decision-making, response execution, and analyst effectiveness. - Develop detection content, security analytics, investigation methods, playbooks, and response workflows that enable SOC and CIRT teams to investigate and respond to AI-related security events. - Maintain appropriate human oversight, evidence quality, auditability, safeguards, and rollback mechanisms as AI capabilities are adopted within Cyber Defense operations. - Track emerging offensive AI capabilities, adversary tooling, threat-actor adoption, AI vulnerability research, and changes in the broader threat landscape, translating findings into practical defensive improvements. - Provide technical leadership and mentorship across Cyber Defense, raising organizational capability in AI security, detection engineering, threat analysis, and incident response. - Influence technical decisions through architecture reviews, technical standards, direct engineering collaboration, design guidance, and clear communication with technical and executive stakeholders. - Represent Thomson Reuters in relevant customer discussions, industry groups, regulatory engagements, and AI security communities. **Qualifications** - 12+ years of progressive experience in cybersecurity, security engineering, security architecture, threat detection, incident response, or a related technical field. - Experience operating as a Principal, Staff, Distinguished Engineer, or equivalent senior technical leader within a large, complex organization. - Strong hands-on experience in Cyber Defense, including detection engineering, security operations, threat hunting, security analytics, incident response, security architecture, or closely related disciplines. - A proven ability to establish technical strategy and deliver security capabilities that are adopted across multiple teams, systems, and operating functions. - Practical experience securing or governing AI-enabled systems, including LLM applications, AI infrastructure, models, agentic workflows, AI integrations, MCP, or comparable tool-use patterns. - Strong understanding of AI security risks, including prompt injection, data exposure, unsafe model output and downstream execution, agent and tool abuse, model and data poisoning, AI supply-chain risk, and AI-enabled social engineering. - Proven experience architecting or delivering AI-assisted detection and response capabilities within a mature 24/7 SOC, CIRT, or comparable cyber defense environment. **What's in it For You?** - Hybrid Work Model: We've adopted a flexible hybrid working environment for our office-based roles while delivering a seamless experience that is digitally and physically connected. - Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. - Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow's challenges and deliver real-world solutions. - Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing. ## Skills ### Required - AI security - cyber defense - threat detection - incident response - security engineering - architecture ### Nice to have - hands-on experience building or operating agentic AI systems - experience applying AI within SAST, AppSec, vulnerability management, detection engineering, or security operations workflows - familiarity with frontier AI vulnerability research programs --- Source: [Apply at thomsonreuters.wd5.myworkdayjobs.com](https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/United-States-of-America-Eagan-Minnesota/Distinguished-Engineer--AI-Threat-Defense_JREQ202811-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)