AI Security Architect – Application Security, Zero Trust & AI Governance
AI Security Solution Architect – Application Security, Zero Trust & AI Governance
Role Summary
• Lead the end-to-end design and governance of an AI-driven vulnerability detection and remediation platform.
• Ensure Zero Trust architecture, regulatory compliance, auditability, and secure SDLC integration.
Required Skills
Application Security
• Application Security (AppSec) including:
• SAST
• SCA
• DAST
• API Security
• Identity and Access Management (IAM)
• Strong experience with:
• Checkmarx
• Snyk
• Fortify
Cloud & Security Architecture
• Zero Trust Architecture (NIST 800-207).
• Cloud security experience with GCP and Azure.
AI Security
• AI security, including:
• Prompt injection protection
• Model abuse prevention
• LLM risk management
DevSecOps & CI/CD
• Experience with CI/CD platforms, including:
• GitHub
• Jenkins
• GitLab
AI / Agentic AI Expectations
• Define agent orchestration strategy using multi-agent architecture and judge models.
• Establish guardrails for AI-driven decisions and suppression workflows.
• Lead Retrieval-Augmented Generation (RAG)-based knowledge integration for secure coding.
Key Responsibilities
Architecture & Security Design
• Define the AI-driven Application Security reference architecture integrating Checkmarx, CI/CD pipelines, and Agentic AI.
• Lead Zero Trust Architecture (ZTA) design, including:
• API Security
• Identity Management
• Role-Based Access Control (RBAC)
• Attribute-Based Access Control (ABAC)
• Define secure SDLC and DevSecOps frameworks.
AI Security & Governance
• Drive LLM-based vulnerability detection and remediation governance.
• Oversee multi-agent decision governance, including LLM judge models and consensus controls.
• Conduct AI/ML security risk reviews covering:
• Model integrity
• Prompt injection
• Data leakage
• Define policies for automated remediation and escalation thresholds.
Risk, Compliance & Audit
• Lead risk assessments and compliance mapping for:
• PCI-DSS
• SOX
• OSFI
• NIST
• Ensure auditability through:
• Trace IDs
• Evidence logs
• SIEM integration