About the Role
Thomson Reuters is enhancing its Cyber Defense capability in response to an AI-driven threat landscape. The Distinguished Engineer, AI Threat Defense is a senior technical authority within the Cyber Defense organization, responsible for strengthening AI-specific threat defense strategy and building AI-augmented detection and response capability into the existing SOC and CIRT. This role drives impact through technical credibility, architecture, hands-on engineering, influence, and mentorship.
Responsibilities
- Own Thomson Reuters' monitoring and response strategy against AI-specific attack vectors.
- Partner with Security Engineering and Architecture to define standards for securing AI infrastructure.
- Track emerging offensive AI capabilities, adversary tooling, and threat-actor adoption of AI.
- Drive monitoring and defenses for AI-specific threat classes.
- Own technical monitoring and response for Thomson Reuters AI-enabled applications, features, and agentic services.
- Build AI-augmented detection content and analytics for AI-specific attack patterns.
- Integrate AI threat detection into the existing SIEM, detection engineering, and SOC monitoring stack.
- Build AI-assisted playbooks and runbooks and integrate them into existing CIRT and SOAR workflows.
- Serve as the principal technical architect for incorporating AI capabilities into the existing 24/7 SOC and CIRT.
- Design automated workflows for AI-related detection, triage, investigation, and response.
- Increase analyst productivity while maintaining human-in-the-loop controls, audit trails, and rollback capability.
- Drive adoption across SOC Operations, CIRT, Threat Detection Engineering, Vulnerability Management, and Attack Surface Reduction.
- Act as the recognized technical authority for AI threat defense across the Cyber Defense organization.
- Provide hands-on mentorship and technical uplift to SOC, CIRT, engineering, and security professionals.
- Represent Cyber Defense externally with industry groups, customers, and regulators.
- Influence engineers and analysts through technical reviews, direct collaboration, architecture guidance, and knowledge sharing.
Requirements
- 12+ years of progressive cybersecurity engineering experience, including experience operating at Principal, Staff, or Distinguished Engineer level within a large, complex enterprise.
- Deep hands-on knowledge of AI-specific attack vectors and defensive architectures.
- Production experience governing AI systems, agentic infrastructure, MCP or equivalent integration patterns.
- Proven experience architecting or delivering AI-assisted detection and response within a mature 24/7 SOC and/or CIRT.
- Experience enhancing an established security organization rather than simply building a new function from scratch.
- Demonstrated ability to drive adoption of detection capabilities and security controls across SOC Operations, CIRT, Threat Detection Engineering, Vulnerability Management, and Attack Surface Reduction.
- Ability to influence technical teams through credibility rather than direct reporting authority.
- Exceptional communication skills, including the ability to explain AI-related security risk to senior executives and technical audiences.
- Experience within a regulated, multi-segment enterprise requiring coordination across legal, compliance, procurement, and governance organizations.
Skills
- AI Threat Defense Strategy
- AI-specific attack vectors
- Prompt injection
- Model Context Protocol (MCP) exploitation
- Agentic system compromise
- Deepfake-enabled social engineering
- AI-assisted reconnaissance
- Securing AI infrastructure
- AI-augmented detection and response
- SIEM
- Detection engineering
- SOAR workflows
- Cybersecurity engineering
- AI systems
- Production security architecture
- Communication skills
Location
- New York City, San Francisco, Los Angeles, and/or Irvine, CA; McLean, VA; Washington, DC
Work Type
- Hybrid Work Model
- Work from anywhere for up to 8 weeks per year
Experience Level
- Distinguished Engineer level
- 12+ years of progressive cybersecurity engineering experience
Education Level
- CISSP
- CISM
- advanced AI/ML security
- cloud security (AWS/Azure/GCP)
- detection-engineering credentials
Salary/Compensations
- For eligible office location(s) including New York City, San Francisco, Los Angeles, and/or Irvine, CA; McLean, VA; Washington, DC: $228,000 USD - $424,000 USD
- For any eligible US locations: $198,200 USD - $368,000 USD
Benefits
- Flexible hybrid working environment
- Flex My Way policies
- Work from anywhere for up to 8 weeks per year
- Career Development and Growth opportunities
- Grow My Way programming
- Skills-first approach
- Comprehensive benefit plans
- Flexible vacation
- Two company-wide Mental Health Days off
- Access to the Headspace app
- Retirement savings
- Tuition reimbursement
- Employee incentive programs
- Resources for mental, physical, and financial wellbeing
- Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance
- Two paid volunteer days off annually
- Pro-bono consulting projects
- Environmental, Social, and Governance (ESG) initiatives
- Market competitive health, dental, vision, disability, and life insurance programs
- Competitive 401k plan with company match
- Competitive vacation, sick and safe paid time off
- Paid holidays
- Parental leave
- Sabbatical leave
- Optional hospital, accident and sickness insurance
- Optional life and AD&D insurance
- Flexible Spending and Health Savings Accounts
- Fitness reimbursement
- Access to Employee Assistance Program
- Group Legal Identity Theft Protection benefit
- Access to 529 Plan
- Commuter benefits
- Adoption & Surrogacy Assistance
- Employee Stock Purchase Plan
- Annual Bonus based on a combination of enterprise and individual performance
About the Company
- Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions.
- We serve professionals across legal, tax, accounting, compliance, government, and media.
- Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency.
- Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.
- We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments.
- At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them.
- Join us and help shape the industries that move society forward.
Equal Opportunity
- As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals.
- To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law.
- Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.
- Thomson Reuters makes reasonable accommodations for applicants with disabilities, including veterans with disabilities, and for sincerely held religious beliefs in accordance with applicable law.
- If you reside in the United States and require an accommodation in the recruiting process, you may contact our Human Resources Department at HR.Leave-Expert@thomsonreuters.com.
- Disability accommodations in the recruiting process may include things like a sign language interpreter, making interview rooms accessible, providing assistive technology, or other relevant accommodations.
- Please note this email is not intended for general recruitment questions and we will promptly respond to inquiries regarding accommodations.
- More information on requesting an accommodation here.
- Learn more on how to protect yourself from fraudulent job postings here.
- More information about Thomson Reuters can be found on thomsonreuters.com
