Technology Fellow, Cybersecurity & AI Security

About the role

This role is the senior-most individual contributor in Technology and owns the technical direction for cybersecurity and AI security across Invitation Homes, including enterprise security architecture, secure development standards, and the security model for every AI and agentic system the company builds or buys. It requires deep, hands-on expertise in application, API, cloud, identity, and data security; in securing LLM and agentic systems (AI gateways, guardrails, adversarial testing, tool and MCP security); and in building the automation that enforces standards in the delivery pipeline. This role reports to the EVP & Chief Technology Officer and partners with the Chief Information Security Officer, who owns the security program, risk posture, and security operations, by setting architecture and engineering standards and building the controls that make them real. It serves as the technical authority on security to senior technology leadership and engineering teams. This is a builder's role with executive-level influence and no direct reports; the Fellow writes code and ships.

Responsibilities

• Own enterprise security architecture and standards across cloud, platform, identity, data, and applications, including reference architectures, secure defaults, and paved roads that make the secure path the shortest path, and hold security authority on the architecture review board.
• Define and enforce the security model for all AI and agentic systems, built or bought: the AI gateway as the single control point for model access (authentication, policy, logging, data classification, rate and cost limits, model routing), input and output guardrails, scoped agent identities and least-agency permissions, tool and MCP integration security, human approval for consequential actions, and kill-switch and containment controls.
• Lead threat modeling, secure design review, adversarial testing, and red-teaming for high-consequence systems (resident data, payments, identity, physical access, and AI actions with side effects), and build the automation that keeps review cycle time to days rather than weeks.
• Own the security quality gates in CI/CD, including static analysis, dependency and secrets scanning, infrastructure-as-code and container scanning, API testing, and scanning of AI-generated code, with gates that block on critical and high findings and exceptions that are time-bound and owned.
• Set identity and access architecture for workforce, resident, and non-human identities, including phishing-resistant MFA, privileged and just-in-time access, workload identity, secrets management, and scoped, auditable identities for AI agents.
• Drive cloud, platform, and data security engineering: security posture and attack-path management, Kubernetes hardening, policy as code, encryption and tokenization of personal and payment data, and data security posture and loss prevention across the warehouse and AI pipelines.
• Serve as technical lead on major incidents and partner with security operations on detection engineering as code, telemetry coverage for AI systems, and tabletop and purple-team exercises that include AI failure modes.
• Lead security assessments of models, vendors, and integrations (frontier model providers, AI coding assistants, data platforms, smart-home devices), write security requirements