Lead Information Security Engineer - AI

We need to output HTML fragment with sections: About the role? Actually the posting includes sections: Description (application window close date), Job Location, About Envestnet, The Team You’ll Join, How You’ll Contribute, What You’ll Need to Bring, Why You’ll Enjoy Working at Envestnet, Sponsorship, Our Investment in You, Our Commitment to Inclusion & Belonging, Recruitment Fraud. We need to remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. So we should remove: "Our Commitment to Inclusion & Belonging" (EEO) and "Recruitment Fraud" (scam-warning). Also "Sponsorship" maybe not boilerplate but it's a statement about visa sponsorship; it's not a standard heading but could be kept? The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. Sponsorship is not exactly that, but it's a statement about visa sponsorship; it's not a standard heading but could be kept as a paragraph. However we might keep it as a short paragraph under maybe "Sponsorship" heading? The instruction says use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but we should only include sections when posting has real specific content. Sponsorship is a statement; we could include as a

without heading. Or we could treat as a heading "Sponsorship" but not in the list; but they said use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). That suggests we should use those standard headings when applicable, but we can also use other headings? Probably better to stick to those headings only. So we need to map content to those headings. We have: - About the role: could include description about role? The posting has "Description The application window will close November 1st, 2026 Job Location The primary work location for this role is Berwyn with a hybrid work model." That's metadata; we could put in a short

maybe under About the role? But they said do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it. So we can include a short paragraph with application window close date and location. - About Envestnet: that's about the company; could be under "About the role"? Actually "About the role" is typical heading for role description. But we have separate "About Envestnet". Could treat as "About the company" but not in list. Maybe we can put under "About the role" as a paragraph describing the company? However they said use headings from list; we can also add other headings if needed? The instruction: "Use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It doesn't forbid other headings, but suggests we should use those for sections. Probably we should map content to those headings where applicable. We have responsibilities: "How You’ll Contribute" is a list of duties. That maps to Responsibilities. We have requirements: "What You’ll Need to Bring" maps to Requirements or Qualifications. We have skills: maybe part of requirements. We have benefits: "Our Investment in You" includes benefits description. We have pay: "Our Investment in You" also includes base salary range. We have schedule: maybe hybrid work model mentioned in Job Location; we could put schedule/hybrid under Schedule? But they said only include section if posting actually states them. The posting mentions hybrid work model; we could include Schedule section with that. We also have "About Envestnet" which is about company; could be placed under "About the role" as a paragraph? Or we could create a heading "About Envestnet" but not in list; maybe we can still use

for that heading as it's a section heading. The instruction says use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't say we cannot use other headings, but the examples are those. Safer to stick to those headings and incorporate company info into About the role paragraph. Thus sections: - About the role: include application window close date, location/hybrid, brief about Envestnet and team? Actually "The Team You’ll Join" could be part of About the role as well. But we could also have a separate section "The Team You’ll Join" but not in list. Might be better to keep as a paragraph under About the role. - Responsibilities: from "How You’ll Contribute". - Requirements: from "What You’ll Need to Bring". - Benefits: from "Our Investment in You" benefits list. - Pay: from "Our Investment in You" salary range. - Schedule: hybrid work model. We must not include boilerplate like EEO, Recruitment Fraud, Sponsorship? Sponsorship is a statement about visa sponsorship; maybe we can keep as a short paragraph under About the role or Requirements? It's not boilerplate but it's a condition. Could be included as a short note. However the instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. Sponsorship is not exactly that, but it's a statement about visa sponsorship; it's not a legal boilerplate but could be considered a condition. I'd keep it as a short paragraph maybe under About the role. We must preserve ALL substantive information; do not invent or summarize away detail. So we need to keep all details from the sections we keep. Let's extract content. First, metadata: - Application window will close November 1st, 2026. - Job Location: primary work location for this role is Berwyn with a hybrid work model. About Envestnet paragraph: "Envestnet is an adaptive WealthTech company that is redefining the future of wealth management by helping advisors meet the moment with its comprehensive technology, actionable insights, and industry leading support. Backed by over 25 years of experience and approximately $7.0 trillion in platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs. For a deeper look at how Envestnet is shaping the future of financial advice, visit www.envestnet.com." The Team You’ll Join paragraph: "You will join Envestnet’s Technology team, where we design, build, and maintain scalable, secure, and robust WealthTech solutions that power the future of financial advice. The team collaborates closely with product, operations, and business stakeholders to drive innovation, enhance efficiency, and enable sustainable growth. Guided by modern engineering practices and a commitment to domain excellence, technical rigor, and collaboration, the Technology team ensures our platforms remain resilient, adaptable, and aligned with evolving business needs making it a core driver of Envestnet’s long term success." How You’ll Contribute (Responsibilities) list: - Continuously assesses the organization’s security landscape, utilizing cutting-edge automation and offensive security techniques to validate controls and uncover potential areas of risk. - Utilizes architecture and engineering insights into major cloud and on-premise workloads to integrate continuous monitoring, automated validation and offensive security into a cohesive strategy and strengthen the overall security posture. - Works cross-organizationally to ensure that security controls are effective, risks are understood and mitigations properly addressed and validated. - Provides Information Security Engineering support for broad areas of the company. - Develops and executes security controls and reports, defenses and countermeasures to detect, analyze, investigate and respond to internal or external attacks and infiltration attempts. - Leads or provides direction for Information Security Engineering projects. - Provides complex analysis of potential risks to information systems security and recommends innovative solutions. - Recommends and implements changes to procedures and systems to enhance information systems security. - Integrates network security controls into an environment to identify risks and reduce their impact. - Provides guidance and advice to less experienced team members. - Secure AI platforms, agents, MCP integrations, plugins, toolchains, and agent-to-agent workflows through architecture reviews, risk assessments, and control validation. - Implement and enhance AI security controls, including data protection, model governance, source code safeguards, and AI-specific risk mitigation capabilities. - Develop and maintain AI security monitoring, detection, investigation, and incident response capabilities to identify and respond to threats across AI environments. - Conduct and participate in adversarial testing, threat assessments, and red/purple team exercises involving AI systems, while evaluating emerging AI technologies, attack techniques, and security risks to enable secure adoption. What You’ll Need to Bring (Requirements) list: - Candidates should demonstrate the relevant experience, skills, and capabilities needed to successfully perform in the role. Relevant experience may be gained through current responsibilities, prior roles, project work, leadership opportunities, or other comparable experiences. - Progressive experience in security engineering, security architecture, cloud security, application security, or identity/security platform engineering in enterprise cybersecurity roles. - Hands-on experience securing AI/ML systems, AI-enabled applications, and agentic ecosystems — including AI governance, agent frameworks, RAG architectures, and LLM integrations — with experience leading the security architecture, implementation, and assessment of AI platforms such as AWS Bedrock, Claude, Microsoft Copilot, GitHub Copilot, Kiro, and MCP integrations. - Broad familiarity with the evolving agentic landscape, including plugins, skills, routines, desktop integrations, agent marketplaces, tool-invocation frameworks, and orchestration platforms. - Demonstrated experience securing and assessing authentication, authorization, and trust models across complex enterprise and AI environments, including delegated access, workload identities, service principals/accounts, API keys, OAuth/OIDC flows, token delegation, agent impersonation, consent models, permissions, delegated workflows, data access controls, autonomous actions, and cross-system trust relationships. - AI-specific threat knowledge — experience identifying and mitigating AI-specific attack vectors: prompt injection, jailbreaking, model/data exfiltration, data poisoning, and insecure output handling in LLM-integrated systems. - Securing AI-assisted development and product-line AI implementation — experience assessing risks AI tools and AI-driven features introduce across the software lifecycle, from code generation to production deployment. - Strong analytical, troubleshooting, and problem-solving skills, with the ability to assess complex security risks and communicate recommendations to technical and business stakeholders. - Nice-to-Haves: - Experience developing automation to validate security controls, detect configuration drift, and improve visibility into AI usage, security posture, and risk. - Familiarity with cloud-native security controls, detection engineering, incident response, and security operations within AI-enabled environments. - Experience with AI red-teaming or adversarial testing of LLM- and agent-based systems. - Experience assessing third-party AI vendors or SaaS tools for data handling and security risk. - Bachelor’s degree in computer science, Information Security, Engineering, or a related field, or equivalent combination of education and relevant experience. - Relevant security certifications (e.g., CISSP, CCSP, CSSLP, GIAC) and/or AI/ML, application security, cloud, or identity-focused certifications demonstrating hands-on experience securing modern AI-enabled systems. Why You’ll Enjoy Working at Envestnet paragraph: "Help shape the future of WealthTech. At Envestnet you’ll gain hands-on experience and collaborate with some of the industry’s brightest minds to deliver meaningful, innovative solutions that make a real difference. We value flexibility in how and where work gets done, and we recognize strong performance with meaningful rewards—because your contributions should drive both business success and your own personal growth. If you’re looking for a place where your work has impact, your development is supported, and your contributions are truly valued, Envestnet is where you can build your future. The opportunity is now!" Sponsorship: "This position is not open to candidates requiring visa sponsorship" Our Investment in You (Pay + Benefits) paragraph: "This