At a Glance
At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.
U.S. Bank is seeking an AI Security Platform Engineer to lead the engineering and operational enablement of commercial agentic security operations platforms and AI-powered security capabilities. This role connects security operations, security engineering, security architecture, and AI engineering to deliver secure, reliable, explainable, and production-ready solutions.
The engineer will integrate AI security platforms with Microsoft Sentinel, security orchestration and automation technologies, threat intelligence platforms, endpoint and identity systems, email and cloud security platforms, and internal security workflows. The role will design and maintain evidence acquisition pipelines, agent orchestration frameworks, AI workflow integrations, observability capabilities, and governance controls that support effective and responsible use of AI in security operations.
This position provides project and change leadership, security oversight, and risk management for complex information security initiatives. The engineer will set design guidelines and implementation patterns, identify emerging risks, develop mitigation plans, influence senior leaders toward simplified solutions, and build trusted relationships across the organization. The role also trains and mentors team members and may contribute to projects that develop new intellectual property.
The Senior Security Engineer will lead the design, engineering, and deployment of next-generation AI-powered Security Operations (SecOps) capabilities. This role combines deep expertise in cybersecurity engineering, security automation, SOAR, cloud security, and agentic AI to build scalable, secure, and autonomous security operations platforms. The ideal candidate will help transform security investigations through AI-driven automation, advanced orchestration, and intelligent decision-support capabilities while ensuring robust governance, observability, and risk management.
Key Responsibilities
Required Skills & Qualifications
Preferred Qualifications
Location expectations
This role requires working from a U.S. Bank location three (3) or more days per week.
If there’s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.
Benefits:
Our approach to benefits and total rewards considers our team members’ whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:
Healthcare (medical, dental, vision)
Basic term and optional term life insurance
Short-term and long-term disability
Pregnancy disability and parental leave
401(k) and employer-funded retirement plan
Paid vacation (from two to five weeks depending on salary grade and tenure)
Up to 11 paid holiday opportunities
Adoption assistance
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law
Review our full benefits available by employment status here.
U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.
E-Verify
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. Learn more about the E-Verify program.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $133,365.00 - $156,900.00U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.
Posting may be closed earlier due to high volume of applicants.
Source: U.S. Bank careers · View original posting
Industry
banking
Employees
70,000
5598 engineers
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Section 1 — Philosophy and priorities. Identified mission — "responsible for securing application code across the enterprise" (U.S. Bank Application Security Engineer job posting). Developer-first shift-left stance — "identifying vulnerabilities early in the software development lifecycle through modern security scanning and tooling integrated directly into development workflows" (U.S. Bank Application Security Engineer job posting). Engineering partnership — "partner closely with engineering teams to configure, maintain, and optimize application security tools within CI/CD pipelines" (U.S. Bank Application Security Engineer job posting). Risk and improvement priorities — The role emphasizes hands-on SAST, SCA, DAST expansion, vulnerability triage, workflow automation, and continuous improvement rather than a publicly documented blocking-only model (U.S. Bank Application Security Engineer job posting). Emerging priority — "AI-driven application security capabilities" and "LLM-driven scanning techniques" are identified as initiatives in the posting (U.S. Bank Application Security Engineer job posting). Stated pain points or goals — Public materials identify the need to embed secure coding practices across the organization, optimize tooling, and find vulnerabilities earlier; detailed pain-point metrics and formal risk-acceptance policy were not publicly available”
Security Team
Key Initiatives
Section 3 — Programs and workflows. Security Champions program No reviewed result documented a U.S. Bank Security Champions program, membership model, or operating metrics. Shift-left in CI/CD Pipeline integration — The AppSec role configures and maintains security tools in CI/CD pipelines, in a "Jenkins-heavy environment" (Dice). Developer workflow integration — The stated goal is to integrate modern security scanning directly into development workflows and identify vulnerabilities early in the SDLC (Dice). the posting does not state whether findings block builds or deployments. Vulnerability management Intake sources — SAST, SCA, DAST, and related code-level vulnerability detection are identified; other intake sources were not publicly available (Dice). Triage and ownership — Engineers analyze, triage, document, and track vulnerabilities using ServiceNow; detailed ownership rules and remediation SLAs were not publicly available (Dice). Secure SDLC ceremonies No public documentation was found for threat modeling, architecture reviews, security sign-offs, secure design reviews, or recurring AppSec governance ceremonies. New programs or tool rollouts in the last 6 months AI-focused AppSec — The 2026 job posting identifies planned or active work involving automation and LLM-driven scanning techniques, but does not name a product, rollout date, or deployment scope (Dice)
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on U.S. Bank's site