AI Security Architect

Avance Consulting; Reading; On-site; GBP 70,000 - 100,000; Full time

Job summary

A prominent consulting firm is seeking an experienced Security Architect specializing in AI and ML security. The role involves creating comprehensive security strategies, conducting risk assessments, and collaborating with teams to embed security measures into AI applications. Ideal candidates will have robust experience with AI technologies, security principles, and programming, ensuring secure AI operations across the organization.

Qualifications

• Experience with AI/ML frameworks like TensorFlow and PyTorch.
• Proficiency in programming languages for AI/ML such as Python, R, C, C++, or Java.
• Familiarity with regulations like GDPR and ISO 27001.

Responsibilities

• Develop and implement security strategies for AI/ML systems.
• Conduct security risk assessments for AI/ML applications.
• Collaborate with teams on security controls for AI/ML models.

Skills

AI technologies

Risk assessment

Problem-solving

Communication

Collaboration

Education

Solid experience as a Security Architect with AI/ML focus

Understanding of AI/ML systems and security principles

Tools

TensorFlow

PyTorch

Git

Kubernetes

Job description

Develop and implement comprehensive AI/ML security strategies, policies, standards and guidelines to protect organizational assets and ensure the secure operation of AI and ML systems.

Develop and own robust enterprise security architecture for AI/ML systems, CI/CD and data pipelines.

Participate in enterprise-wide architecture initiatives for AI/ML. Understand the workflow and pipeline architectures of ML and deep learning workloads.

Conduct security risk assessments and threat modeling for AI/ML and other business projects performed thorough design reviews and security assessments of architectures and designs, identifying vulnerabilities, threats, and risks, and providing recommendations for effective mitigation measures for common attack vectors and threats.

Support the testing of AI/ML models, LLM and development of trustworthiness, safety, fairness, bias and inappropriateness detection, as well as adversarial test specification, development, and execution.

Collaborate with data scientists, engineers, and other stakeholders to embed security controls and measures into AI/ML applications, models, algorithms, and data pipelines.

Define and enforce robust access controls, authentication mechanisms, and encryption standards to safeguard AI/ML systems, training data, provenance, and any sensitive data.

Stay abreast of emerging AI security threats, trends, and technologies, evaluating their impact and proactively adapting security measures to mitigate potential risks.

Provide technical guidance and support to cross-functional teams during the design, development, and deployment of AI/ML systems, ensuring security considerations are properly addressed.

Conduct regular training sessions and awareness programs to educate stakeholders on AI/ML security best practices, policies, and procedures.

Collaborate closely with the IT security team to ensure AI/ML systems comply with relevant regulatory requirements and industry standards, such as the EU AI Act, NIST AI RMF, the Digital Services Act, the Digital Markets Act, GDPR and ISO 27001.

Work alongside incident response teams to investigate and respond to security incidents and breaches involving AI/ML systems, implementing remedial actions and preventative measures.

Evaluate and recommend appropriate security tools, technologies, and frameworks to enhance the overall security posture of AI/ML and other business systems.

Develop and maintain relationships between data scientists, data engineers, developers, operations (DevOps, DataOps, MLOps) and business unit leaders to govern and support scalability of the ML and AI initiatives.

Essential skills/knowledge/experience:

Solid experience as a Security Architect, with a focus on AI/ML security, demonstrating a deep understanding of AI technologies, algorithms, models, and frameworks.

Extensive knowledge of security principles, best practices, and standards within the context of AI/ML systems.

Previous hands-on experience as developer, programmer or data scientist would be preferred.

Proficiency in programming languages commonly used in AI/ML, such as Python, R, C, C++, or Java, and their associated security considerations.

Previous experience with ML, LLM, deep learning and data manipulation techniques, libraries, and frameworks such as TensorFlow, PyTorch, Jax, and scikit-learn is desirable.

Experience in implementing secure coding practices, DevOps, CI/CD pipelines and familiarity with secure software development life cycle (SDLC) methodologies.

Strong understanding of modern software engineering, cloud services and DevOps, including knowledge of DevOps workflows and tools, such as Git, containers, Kubernetes and CI/CD orchestration tools.

Strong understanding of common security vulnerabilities and threats specific to AI/ML, including adversarial attacks, prompt injection, data poisoning and the MITRE ATLAS framework.

Hands on experience using security assessment and threat modelling tools and techniques to evaluate AI/ML systems and identify potential security weaknesses.

Familiarity with current and emerging regulations and standards, such as the EU AI Act, the Digital Services Act, the Digital Markets Act, GDPR and ISO 27001, and their implications for AI/ML security, data protection and privacy.

Proven track record in designing and implementing security controls, access management, and encryption solutions for AI/ML systems.

Excellent analytical and problem-solving skills, with the ability to assess complex security risks and develop effective mitigation strategies.

Outstanding communication and collaboration skills, enabling you to effectively convey technical concepts to both technical and non-technical stakeholders.

* Free services are subject to limitations