Architect and maintain an AI-driven threat assessment framework to continuously identify, prioritize, and remediate vulnerabilities across web, mobile, API, and cloud-native applications.
Define and govern counter measures against AI-generated attacks, including detection pipelines, model-aware WAF policies, and runtime application self-protection (RASP) strategies.
Perform and oversee advanced application penetration testing and dynamic/static analysis (DAST/SAST) with a focus on high-complexity environments.
Collaborate with product, DevOps, IT and platform engineering to embed security guardrails at every stage of CI/CD pipelines — shift-left and shift-everywhere.
Mentor and guide a team of security engineers; establish technical standards, playbooks, and review processes.
Stay ahead of emerging threat intelligence, particularly adversarial AI research, and adapt defensive strategies accordingly.
Lead collaborative Purple Team exercises to the next level, leveraging AI to provide a wider coverage against blue team defenses, with real-time feedback loops to identify detection gaps.
Facilitate structured debrief sessions after each exercise, driving measurable improvements in SIEM rules, EDR coverage, alert fidelity, and incident response runbooks.
Qualifications & Skills required
Education & Experience
Bachelor’s degree in computer science, Information Security, or a related field.
Minimum of 10+ years of experience in Application Security is a must.
Proven track record owning application security programs in a complex, multi-stack enterprise environment.
Deep, hands-on experience leveraging AI/ML tooling both offensively (red teaming) and defensively (anomaly detection, AI-powered SIEM correlation).
Demonstrated ability to design and execute AI-specific attack simulations — prompt injection, data poisoning, model inversion — and build mitigations.
Strong understanding of modern application stacks: containerized microservices, serverless, GraphQL APIs, OAuth 2.0 / OIDC flows.
Experience integrating security tooling (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines.
Lead collaborative Purple Team exercises with AI.
Work closely with the SOC, threat intelligence, and incident response teams to ensure purple team findings directly feed into defensive improvements.
Evaluate and deploy purple team platforms (e.g., Safe Breach or custom automation) to scale exercise frequency and reporting.
Guide and upskill red and blue team members in purple teaming methodology — building a culture of continuous adversarial validation.
Technical Skills
Understanding of threat intelligence sources and risk management frameworks (e.g., NIST, CVSS).
Strong knowledge of network and application security, as well as common vulnerabilities and attack vectors.
Strong knowledge of OWASP Top 10 and secure coding practices
Experience with SAST, DAST, IAST, and software composition analysis (SCA)
Secure SDLC and threat modeling (e.g., STRIDE, PASTA)
Knowledge of LLM attack vectors · Adversarial ML · AI red teaming · Prompt injection
Experience and hands on with Purple Teaming, ATT&CK mapping · VECTR / Picus · Debrief facilitation · Detection tuning.
Have worked on Zero trust · API gateway security · Cloud-native · Microservices
Hands-on experience on Burp Suite Pro
The Team
Pitney Bowes (NYSE: PBI) is a global shipping and mailing company that provides technology, logistics, and financial services to more than 90 percent of the Fortune 500. Small business, retail, enterprise, and government clients around the world rely on Pitney Bowes to remove the complexity of sending mail and parcels. For additional information visit Pitney Bowes at www.pitneybowes.com.
We will
Provide the will: opportunity to grow and develop your career
Offer an inclusive environment that encourages diverse perspectives and ideas
Deliver challenging and unique opportunities to contribute to the success of a transforming organization
Offer comprehensive benefits globally (PB Benefits and Wellbeing Programs)
Pitney Bowes is an equal opportunity employer that values diversity and inclusiveness in the workplace.
All interested individuals must apply online.
