AI Security Architect Director

State Street; Kraków; On-site; PLN 254,000 - 310,000; Full time

Benefits offered by this job

Permanent contract from day one

Birthday day off

Gold medical package

Private pension plan

Volunteer days

Job summary

State Street is seeking an AI Security Architect to design, implement, and review security controls for AI/ML and GenAI solutions across the technology environment. You will partner with engineering, product security, and platform teams to ensure secure, compliant delivery and risk-managed AI capabilities.

This role targets a hands-on security professional with strong foundations in application, cloud, or product security who aims to grow deeper expertise in AI security architecture and risk

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field.
• Relevant security or cloud certifications are a plus.
• 5-7 years of experience in application security, product security, cloud security, or security engineering roles.
• Experience securing cloud-native applications or platforms in an enterprise environment.
• Exposure to AI/ML or data-driven systems, including model usage, APIs, or analytics platforms.
• Familiarity with secure software development practices and DevSecOps concepts.
• Experience working in or with regulated environments preferred.
• Solid technical fundamentals in security architecture and secure design.
• Curiosity and willingness to learn in a rapidly evolving AI security landscape.
• Ability to break down risks and communicate them clearly to engineers.
• Collaborative, execution-focused mindset.
• Comfortable working with guidance while progressively taking on more responsibility.

Responsibilities

• Contribute to the design and implementation of secure architecture patterns for AI/ML and Generative AI systems.
• Support the development and documentation of AI security standards, reference architectures, and guardrails.
• Participate in architecture and design reviews for AI-related initiatives, providing security guidance under senior architect direction.
• Partner with engineering teams to ensure security requirements are considered early in solution design.
• Perform AI-focused threat modeling for AI services, models, and data flows.
• Identify security risks such as data leakage, prompt injection, insecure model access, OSS vulnerabilities, and misuse scenarios.
• Work with senior architects and security partners to recommend appropriate mitigations and compensating controls.
• Support integration of AI security controls into software development and DevSecOps workflows.
• Assist in defining security requirements and validation checks for AI pipelines and platforms.
• Help develop repeatable patterns and templates that enable teams to adopt AI securely with less friction.
• Assist with security reviews for emerging AI capabilities, including GenAI tools, internal AI services, and developer productivity use cases.
• Stay informed on AI security trends, tooling, and common risk patterns through research and internal knowledge sharing.
• Contribute ideas and observations on improving AI security practices across the organization.
• Ensure AI security designs align with internal policies and external standards (e.g., NIST, ISO, FFIEC concepts).
• Support audit, risk, and compliance efforts by helping document architecture decisions and controls.

Skills

AI security

security architecture

threat modeling

DevSecOps

communication to engineers

cloud security

application security

risk management

team collaboration

Education

Bachelor’s degree in CS/Info Security/Engineering

Security or cloud certifications

Job description

State Street is seeking an AI Security Architect to design, implement, and review security controls for AI/ML and GenAI solutions across the technology environment. You will partner with engineering, product security, and platform teams to ensure secure, compliant delivery and risk-managed AI capabilities.

This role targets a hands-on security professional with strong foundations in application, cloud, or product security who aims to grow deeper expertise in AI security architecture and risk