AWS Security AI Automation

Role Summary

The AWS Security Engineer (AI & Automation) will carry the full scope of the AWS Security Engineer role and

additionally lead the design and delivery of AI-driven automation, dashboards, and agentic tooling to

accelerate USANA's cybersecurity operations and upskill the in-house team. The role includes:

Security Automation & Orchestration

• Design and build security automation and orchestration workflows using AWS-native services

(Lambda, EventBridge, Step Functions) and SOAR patterns.

• Automate repetitive security operations tasks to reduce manual effort and rework.

• Develop and maintain reusable automation components and runbooks.

• should have True Foundry experience

AI-Driven Dashboards & Reporting

• Build dashboards against cybersecurity tool sets – incidents, threat intelligence, and vulnerability

data – to give the cyber team actionable, consolidated visibility.

• Replace manual, ad-hoc dashboard building with maintainable, automated reporting pipelines.

• Iterate on dashboards based on stakeholder feedback and evolving operational needs.

Agentic & GenAI Tooling for Security Operations

• Design and build AI agents and assistants (using approved enterprise tools such as Claude

Enterprise) to support alert triage, summarization, and investigation acceleration.

• Enforce strict entitlement and access controls per dataset for any conversational agent querying

sensitive cyber data, ensuring least-privilege access aligned with USANA's data sensitivity

requirements.

• Validate agent outputs and guardrails before operational use.

AIOps & ML-Based Anomaly Detection

• Apply AIOps and machine-learning techniques to detect anomalies and surface high-priority signals across security telemetry.

• Tune models and detection logic to reduce noise and improve fidelity.

Event-Driven Auto-Remediation & Guardrails

• Implement event-driven auto-remediation and preventive guardrails for common cloud security

misconfigurations and policy violations.

• Ensure automated actions operate within approved change-control and safety boundaries.

Detection-as-Code & CI/CD Security Automation

• Implement detection-as-code practices and embed automated security checks into CI/CD

pipelines.

• Version-control detections, automations, and guardrails for auditability and repeatability.

Security Telemetry Data Pipelines

• Build and maintain data pipelines that aggregate security telemetry for analytics, dashboards, and AI workflows.

• Ensure data quality, normalization, and access governance across pipeline stages.

Team Enablement & Upskilling

• Upskill USANA's cyber team on AI-assisted security tooling, automation practices, and dashboard

development.

• Document tooling, share best practices, and reduce dependency on manual processes.