Quick overview
SeniorityMid Senior
Work modeHybrid
LocationUnited States
Posted20 hours ago
AWSOWASPLLMGenerative AIAgile
Job description
Position Overview
We are seeking a Security Architect specializing in AI Cybersecurity Threat Monitoring to establish and operationalize threat response capabilities targeting and leveraging AI systems. This role focuses on identifying, detecting, investigating, hunting, and responding to emerging threats across enterprise GenAI, agentic AI, foundation models, data sources, non-human identities, Model Context Protocol (MCP), and tool integrations.
Rather than siloing AI security, the Architect will integrate AI threat response, threat modeling, and detection engineering into existing SOC, IR, and Threat Hunting workflows using industry frameworks such as MITRE ATLAS, NIST AI RMF, and OWASP Top 10 for LLM Applications. This individual must move seamlessly between threat research, architecture roadmapping, and hands-on detection engineering.
Key Responsibilities
AI Threat Modeling & Attack Scenarios: Define and pilot an AI Threat Modeling capability; build a comprehensive library of AI attack scenarios mapped to the MITRE ATLAS framework to support Purple Teaming and Adversary Emulation.
Detection Engineering & SIEM/SOAR: Design, build, test, and tune high-fidelity AI detection rules, correlation logic, and automated response playbooks within enterprise SIEM/SOAR platforms.
AI Threat Hunting: Build proactive, AI-focused threat hunting playbooks and execute targeted hunts across enterprise GenAI platforms, cloud environments, and AI APIs.
Telemetry & Logging Architecture: Define telemetry, logging, and observability requirements across AI systems (e.g., token usage, prompt/response telemetry, MCP integrations) and lead gap analyses to expand SOC visibility.
Adversary Emulation & Purple Teaming: Partner with Threat Informed Defense and Purple Teams to validate AI-specific attack paths, test defense effectiveness, and tune alerting thresholds.
Incident Response & Forensics Support: Collaborate with the IR team to author and refine AI-specific runbooks, investigation workflows, and digital forensics/evidence-gathering standards.
Strategic Roadmapping & Executive Advisory: Conduct organizational readiness assessments, track emerging AI attack vectors, and present risk mitigation roadmaps and investment recommendations to technology leadership.
Required Skills & Experience (Ranked by Importance)
- Security Operations, Detection Engineering & Threat Hunting: Deep background in SOC monitoring, detection engineering, SIEM/SOAR rule creation, alerting pipelines, and threat hunting workflows.
- AI & LLM Cybersecurity: Hands-on experience securing Generative AI, Agentic AI, Large Language Models (LLMs), Model Context Protocol (MCP), and AI APIs especially within AWS cloud environments.
- Framework Proficiency: Practical application of MITRE ATLAS, OWASP for LLM Applications, and NIST AI RMF for threat modeling and control mapping.
- Purple Teaming & Adversary Emulation: Experience designing and testing attack scenarios against AI workloads to validate defensive controls.
- Telemetry & Observability Strategy: Proven ability to architect logging, telemetry pipelines, and data visibility requirements for cloud and AI/ML workloads.
- Non-Human Identity & Access Management: Understanding of security best practices for AI service accounts, automated agents, API tokens, and machine-to-machine integrations.
- Cross-Functional Architecture & Stakeholder Leadership: Experience driving security architecture reviews, leading executive briefings, and translating complex AI risks into business decisions.Qualifications & EducationEducation: Bachelor s degree in Cybersecurity, Computer Science, Information Systems, Data Science, Engineering, or equivalent practical experience. Advanced degree preferred.Basic Requirements: Must be at least 18 years old and legally authorized to work in the United States without sponsorship (Immigration Reform Act of 1986).Preferred CertificationsSecurity Architecture & Leadership: CISSP, CCSP, GIAC (e.g., GDSA, GCIA, GCIH), or AWS Certified Security Specialty.AI Security & Governance: Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM), CompTIA Security AI+, or equivalent specialized training.Cloud & AI Fundamentals: AWS Certified AI Practitioner, AWS Certified Cloud Practitioner.Work Style & Core CompetenciesStrong analytical mindset to parse complex telemetry and detect subtle, novel adversary techniques.Executive-level communication skills to present roadmaps, project health, and threat intelligence to Directors, VPs, and engineering peers.Collaborative and adaptable in fast-moving Agile environments with shifting enterprise priorities.
Similar jobs
- NA

Solution Architect - (Oracle Fusion Cloud Financials)New
Nasscomm, Inc. · United States · Hybrid 🇺🇸
OracleAzureTechnologySalary not listed20 hours ago - SC
Senior AI/ML ConsultantNew
ScaleHealthTech LLC · United States · Hybrid 🇺🇸
DockerSQLAWS+23TechnologySalary not listed20 hours ago - IS

Business Systems Analyst Oracle Order to Cash FinancialsNew
Infobahn Softworld Inc. · Schaumburg, IL · On-site 🇺🇸
OracleComplianceRevenue Management+3TechnologySalary not listed20 hours ago - SS
Data ArchitectNew
Sahi Softtech · Phoenix, AZ · Hybrid 🇺🇸
SQLGitAWS+10TechnologySalary not listed20 hours ago - DS
Oracle Apex & Forms DeveloperNew
Dew Softech Inc · Harrisburg, PA · Remote 🇺🇸
OraclePL/SQLSQL+6TechnologySalary not listed20 hours ago - AT
IT Security SpecialistNew
Ardent Technologies, Inc. · Milford, MI · Hybrid 🇺🇸
PythonPowerShellBash+3TechnologySalary not listed20 hours ago - CT
FileNet Dev & Support EngineerNew
CogniSoft Technologies · Phoenix, AZ · Hybrid 🇺🇸
SplunkConfluenceGrafana+2TechnologySalary not listed20 hours ago - MU

Web DeveloperNew
MphasiS Corporation USA · Alpharetta, GA · Hybrid 🇺🇸
Next.jsSASSGit+17TechnologySalary not listed20 hours ago - PG

Test Engineer GenRocket, Synthetic Data | Onsite - 71096New
PRIMUS Global Services Inc. · Milwaukee, WI · On-site 🇺🇸
PythonTechnologySalary not listed20 hours ago - SS

W2 Data ArchitectNew
Spear Staffing · United States · Hybrid 🇺🇸
SQLETLBash+6TechnologySalary not listed20 hours ago - KB
IT Security Analyst/cybersecurity/(814125)/In-personNew
Key Business Solutions, Inc. · United States · Remote 🇺🇸
PCI DSSHIPAATechnologySalary not listed20 hours ago - LO

Data and Analytics EngineerNew
LogiX-Guru · Pittsburgh, PA · Hybrid 🇺🇸
SQLT-SQLAWS+1TechnologySalary not listed20 hours ago
