The AWS Security Engineer (AI & Automation) will carry the full scope of the AWS Security Engineer role and additionally lead the design and delivery of AI-driven automation, dashboards, and agentic tooling to accelerate USANA's cybersecurity operations and upskill the in-house team. The role includes:

Security Automation & Orchestration :

- Design and build security automation and orchestration workflows using AWS-native services (Lambda, EventBridge, Step Functions) and SOAR patterns.

- Automate repetitive security operations tasks to reduce manual effort and rework.

- Develop and maintain reusable automation components and runbooks.

- should have True Foundry experience

AI-Driven Dashboards & Reporting :

- Build dashboards against cybersecurity tool sets - incidents, threat intelligence, and vulnerability data - to give the cyber team actionable, consolidated visibility.

- Replace manual, ad-hoc dashboard building with maintainable, automated reporting pipelines.

- Iterate on dashboards based on stakeholder feedback and evolving operational needs.

Agentic & GenAI Tooling for Security Operations :

- Design and build AI agents and assistants (using approved enterprise tools such as Claude Enterprise) to support alert triage, summarization, and investigation acceleration.

- Enforce strict entitlement and access controls per dataset for any conversational agent querying sensitive cyber data, ensuring least-privilege access aligned with USANA's data sensitivity requirements.

- Validate agent outputs and guardrails before operational use.

AIOps & ML-Based Anomaly Detection :

- Apply AIOps and machine-learning techniques to detect anomalies and surface high-priority signals across security telemetry.

- Tune models and detection logic to reduce noise and improve fidelity.

Event-Driven Auto-Remediation & Guardrails :

- Implement event-driven auto-remediation and preventive guardrails for common cloud security misconfigurations and policy violations.

- Ensure automated actions operate within approved change-control and safety boundaries.

Detection-as-Code & CI/CD Security Automation :

- Implement detection-as-code practices and embed automated security checks into CI/CD pipelines.

- Version-control detections, automations, and guardrails for auditability and repeatability.

Security Telemetry Data Pipelines :

- Build and maintain data pipelines that aggregate security telemetry for analytics, dashboards, and AI workflows.

- Ensure data quality, normalization, and access governance across pipeline stages.

Team Enablement & Upskilling :

- Upskill USANA's cyber team on AI-assisted security tooling, automation practices, and dashboard development.

- Document tooling, share best practices, and reduce dependency on manual processes.