Advisory Engineer, AI Security

This new position joins Lenovo's AI Governance and Product Security organization within the Chief AI Office in our mission of enabling security and trust in Lenovo's use of AI technology in product development through Responsible AI. The AI Governance and Product Security Office works across all Lenovo's business and product areas to ensure AI tools are used in accordance with Company standards and international regulations, and products are developed and implemented with industry best practices for security. In partnership with AI and security leaders across Lenovo, the Advisory Engineer, AI Security will lead the technical security architecture and assurance approach for AI models, AI-enabled products and AI development platforms. The role defines secure-by-design patterns, conducts complex security and model assurance reviews, develops technical standards and remediation guidance, and enables consistent adoption across global product and internal-use AI initiatives. This person is a strategic thinker and strong collaborator who combines leadership and delivery capability with deep technical expertise in AI security. They must be delivery-focused: able to translate AI security strategy, risk findings and technical standards into prioritized work, implementable control

, measurable outcomes and sustained adoption across engineering teams. Hands-on experience designing security architectures and integrating AI systems with enterprise security tools across cloud environments, APIs and data pipelines is essential. A passion for AI, technology and engineering excellence is critical, with a strong belief that security is built through people, process and scalable technology. Key Responsibilities: Drive delivery of the AI Security Architecture and Assurance roadmap, defining priorities, milestones, technical deliverables and success measures; track agreed remediation actions through to closure. Define and maintain secure-by-design technical standards, reference architectures, control patterns and assessment methodologies for AI models, LLM and agentic AI systems and AI development platforms. Lead security architecture reviews, threat modelling and technical assurance for high-risk AI systems, products and material changes. Establish and improve model-assurance requirements for third-party and open-weight models, including provenance, supply-chain risk, deployment configuration, vulnerabilities, updates and compensating controls. Define security requirements and technical evaluation criteria for AI security tooling; partner with operational teams on implementation, integration and lifecycle management. Support material AI security incidents and convert lessons learned into improved controls, standards and engineering guidance. Occasional domestic and international travel (approx. 5%) for meetings and collaboration. Basic Requirements: Bachelor's degree in computer science, artificial intelligence, data science, software engineering, mathematics, or a related field 8+ years in product security, application security, cloud security, security engineering or a closely related discipline. Preferred Qualifications: Demonstrated track record of delivering complex security initiatives from assessment and design through implementation, validation and operational handover, with measurable adoption and risk-reduction outcomes. Experience leading security architecture reviews, threat modelling and remediation through the software or product development lifecycle. Strong understanding of AI security threats and mitigations. Experience designing or assessing security controls across cloud environments, APIs, CI/CD pipelines, identity/access management and data flows. Ability to convert security findings and standards into prioritized technical requirements, clear delivery plans and implementable remediation guidance for engineering teams. Ability to participate in incident response and product security operations as required. Relevant security certifications are advantageous. Location: US - Morrisville preferred; remote-based within the U.S. may be considered. In compliance with Colorado's EPEWA, the expected application deadline for this position is October 25, 2026. This applies to both external and internal candidates.