The posting
The Security Technology Engineering team is responsible for collaborating and partnering with various Business Units (BUs) and stakeholders across the organization to manage external and insider threat detection, mitigation, investigation and response efforts across the organization. The Lead Info Security Engineer will participate in the activities of a global, expert team that develops robust technical solutions and advanced AI/ML capability to enable preventive threat detection efforts.
The cloud security Data-AI engineer works with our Cyber Engineering, Operations, Architecture and Global Infrastructure teams to deploy and operate a secure cloud application infrastructure that aligns with the Cyber security strategic initiatives and business needs. They will be responsible for engineer designs and maintaining data pipelines that extract, transform and load vulnerability, configuration and asset data at scale across heterogeneous environments, including cloud services and workloads, virtual machines, on-premises infrastructure, network devices and middleware.
The cloud security Data-AI engineer applies data science techniques to correlate and prioritize large, noisy vulnerability datasets, distinguishing genuine risk signals from background noise to produce actionable insights. The ideal candidate will be capable of querying and analyzing high-volume security datasets, including those generated by AI-enabled and modern scanning tools, to identify systemic exposure trends and emerging risk clusters.
The cloud security AI engineer is expected to maintain deep domain expertise in vulnerability data across asset classes, including an understanding of how exploitability, exposure and compensating controls differ by asset type.
The cloud security AI engineer evaluates and recommends defense-in-depth compensating controls across the technology stack — spanning network, API, ingress, application, OS/kernel and orchestration/control plane layers — to reduce risk where immediate remediation is not feasible.
They are expected to be self-starters, have a strong work ethic, leverage analytical and critical thinking and be resourceful in working as part of a global virtual team. The role also requires interfacing with other business units so the candidate must have strong verbal and written communication skills.
Key Responsibilities and Duties
- Provides operations and engineering support for critical security systems and services including servers, endpoint security, computer forensics, vulnerability/penetration assessment/mitigation, and security event management.
- Leads the cost/benefit evaluation of cloud solutions compared to virtual private networks, dedicated hosting, and in-house solutions.
- Reviews technical feasibility of adopting external cloud based IT platform and infrastructure services within the organization.
- Leads the identification of portions of the organization's IT platform/infrastructure with the highest potential return for cloud deployment.
- Facilitates implementation of the organization's global strategies and initiatives to enhance Information Technology plans, operations and procedures.
- Ensures the execution of vulnerability analysis and exploitation of applications, operating systems and networks.
- Reports identified intrusion or incident paths and methods discovered through testing and evaluation procedures.
- Designs, develops and implements countermeasures, systems integration and tools specific to cyber and information operations.
- Resolves and documents complex malware and intrusion issues within the system as they occur.
- Functions as an internal information security consultant on the standards, complex issues and best practices for the organization.
- Conducts testing and analysis of complex software systems to determine both the functionality and intent of the systems.
- Communicates with cybersecurity risk and security operation teams to enhance the overall security posture of the enterprise.
- Coaches, reviews and delegates work to lower level professionals to enhance their knowledge and performance related to information technology (IT) Security.
Educational Requirements
- University (Degree) Preferred
Work Experience
- 5+ Years Required; 7+ Years Preferred
Physical Requirements
- Physical Requirements: Sedentary Work
Career Level 8IC
Required Qualifications:
- 5+ years of experience in Information Security or IT Technology.
- 3+yrs experience python coding
- Experience in designing and maintaining data pipelines that extract, transform, and load vulnerability, configuration, and asset data at scale across heterogeneous environments, including cloud services and workloads, virtual machines, on-premises infrastructure, network devices, and middleware
- Experience applying data science techniques to correlate and prioritize large, noisy vulnerability datasets, distinguishing genuine risk signals from background noise to produce actionable insights
- Hands-on AWS cloud experience
Preferred Qualifications:
- Degree in Computer Science or Data Science
- Experience of querying and analyzing high-volume security datasets — including those generated by AI-enabled and modern scanning tools — to identify systemic exposure trends and emerging risk clusters
- Experience with cloud technologies such as AWS, Azure, GCP
- Security certifications such as CKA, CKS, CISSP, GIAC, AWS, Azure, etc.
- Excellent verbal, written, and interpersonal communication skills
- Ability to provide strong customer service.
- Experience maintaining deep domain expertise in vulnerability data across asset classes, including how exploitability, exposure, and compensating controls differ by asset type
- Experience evaluating and recommending defense-in-depth compensating controls across the technology stack — network, API, ingress, application, OS/kernel, and orchestration/control plane layers — to reduce risk where immediate remediation is not feasible
Related Skills
Accountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail-Oriented, General Risk Management, Network Security, Prioritizes Effectively
Anticipated Posting End Date:
2026-10-13
Base Pay Range: $124,000/yr - $154,000/yr
Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location. In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual incentive plans).
_____________________________________________________________________________________________________
Company Overview
Every worker deserves a secure retirement. For more than 100 years, TIAA has delivered it for millions of people. Founded to help educators retire with dignity, today weʼre a market-leading retirement company fueled by world-class asset management. But weʼre not just another legacy financial services firm. Weʼre fighting harder than ever before for our clients and the many Americans who need us.
Our Culture of Impact
At TIAA, we're on a mission to build on our 100+ year legacy of delivering for our clients while evolving to meet tomorrow's challenges. We equip our associates with future-focused skills and AI tools that enable us to advance our mission. Together, we are fighting to ensure a more secure financial future for all and for generations to come. We are guided by our values: Champion Our People, Be Client Obsessed, Lead with Integrity, Own It, and Win As One. They influence every decision we make and how we work together to serve our clients every day. We thrive in a collaborative in-office environment where teams work across organizational boundaries with shared purpose, accelerating innovation and delivering meaningful results. Our workplace brings together TIAA and Nuveen's entrepreneurial spirit, where we work hard and work together to create lasting impact. Here, every associate can grow through meaningful learning experiences and development pathways—because when our people succeed, our impact on clients' lives grows stronger.
Benefits and Total Rewards
The organization is committed to making financial well-being possible for its clients, and is equally committed to the well-being of our associates. That’s why we offer a comprehensive Total Rewards package designed to make a positive difference in the lives of our associates and their loved ones. Our benefits include a superior retirement program and highly competitive health, wellness and work life offerings that can help you achieve and maintain your best possible physical, emotional and financial well-being. To learn more about your benefits, please review our Benefits Summary.
Equal Opportunity
We are an Equal Opportunity Employer. TIAA does not discriminate against any candidate or employee on the basis of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status.
Our full EEO & Non-Discrimination statement is on our careers home page, and you can read more about your rights and view government notices here.
Accessibility Support
TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities.
If you are a U.S. applicant and desire a reasonable accommodation to complete a job application please use one of the below options to contact our accessibility support team:
Phone: (800) 842-2755
Email: [email protected]
Drug and Smoking Policy
TIAA maintains a drug-free and smoke/free workplace.
Privacy Notices
For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here.
For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here.
For Applicants of TIAA Global Capabilities, click here.
For Applicants of Nuveen residing in Europe and APAC, please click here.
