Ai Security Architect

Itsector; Aveiro; Hybrid; EUR 50,000 - 90,000; Full time

Benefits offered by this job

Hybrid working model

Health Insurance

Competitive rewards based on knowledge

Certification, technical and behaviora

Team Building and Happy Hours

Work-life balance initiatives

Job summary

ITSector is seeking an ambitious security professional to support and review AI/GenAI use cases from design to production, defining security requirements for platforms, APIs, and tool integrations. The role focuses on architecture reviews, threat modelling, and ensuring secure deployments with robust logging and auditability.

The candidate will validate guardrails for data usage, manage risks like prompt injection and data leakage, and contribute to governance and secure-by-design practices in a

Qualifications

• Degree in Computer Engineering or equivalent is required.
• Background in cybersecurity, ideally application security, product security, cloud security, or security architecture.
• Experience with security reviews, architecture reviews, threat modelling, and defining technical controls.
• Familiarity with IAM, API security, secrets management, logging, monitoring, and control validation.
• Knowledge of data protection, privacy, data minimization, and secure handling of sensitive or regulated data.
• Written and verbal communication skills in Portuguese and English.
• Ability to challenge technical implementations and validate that controls are effectively applied.

Responsibilities

• Review AI/GenAI use cases from design through production.
• Define security requirements for AI platforms, APIs, agents, tool use, and integrations.
• Perform architecture reviews, threat modelling, and security reviews of AI solutions.
• Validate integrations and deployments against security, privacy, logging, and auditability requirements.
• Identify and mitigate risks such as prompt injection/jailbreaks, data leakage, unsafe tool use, and excessive agent autonomy.
• Define guardrails for data usage, especially for sensitive or regulated data.
• Ensure secure logging, monitoring, audit trails, and evidence of control effectiveness.
• Contribute to AI security governance, standards and secure-by-design patterns.

Skills

Degree in Computer Engineering / E.E.

Cybersecurity background

GenAI security

Threat modelling

Security reviews / architecture

IAM & API security

Data protection & privacy

Security governance & controls

Critical thinking & challenge

Portuguese & English communication

Education

Degree in Computer Engineering or related field

Tools

AWS

Azure

GenAI platforms (Bedrock / Azure OpenAI)

Job description

Let's take a look at the profile we are looking for:

• Ambitious people with a passion for this area;
• Degree in Computer Engineering, Electrical Engineering or similar;
• Background in Cybersecurity, ideally application security, product security, cloud security, or security architecture;
• Understanding of GenAI/LLM-based solutions from a security and risk perspective;
• Experience with security reviews, architecture reviews, threat modelling, and defining technical controls;
• Experience with IAM, API security, secrets management, logging, monitoring, and control validation;
• Knowledge of data protection, privacy, data minimization, and secure handling of sensitive or regulated data;
• Ability to challenge technical implementations and validate that controls are effectively applied;
• Familiarity with AWS and/or Azure environments in the context of AI workload security;
• Exposure to AWS Bedrock, Azure OpenAI/Azure AI Foundry, or similar GenAI platforms;
• Familiarity with OWASP Top 10 for LLM Applications/Agentic AI, SAIF (Secure AI Framework), Model Context Protocol (MCP) and agent-to-tool security considerations, Agent-to-Agent (A2A) architectures and agentic trust boundaries, and emerging risk taxonomies such as MCP-38;
• Exposure to DevSecOps and/or MLOps as a collaboration context;
• Written and verbal communication skills (Portuguese and English);
• Ability to work effectively and manage deadlines;
• Sense of responsibility, commitment and integrity;
• Focus on innovation, dynamism, autonomy and teamwork.

Main Responsibilities

• Support and review AI/GenAI use cases from design through production;
• Define security requirements for AI platforms, APIs, agents, tool use, and integrations;
• Perform architecture reviews, threat modelling, and security reviews of AI solutions;
• Validate integrations and deployments against security, privacy, logging, and auditability requirements;
• Identify and mitigate risks such as prompt injection/jailbreaks, sensitive information disclosure/data leakage, unsafe tool use/excessive agency, abusive or unbounded consumption, insecure integrations or poisoned inputs;
• Define guardrails for data usage, especially for sensitive, personal, confidential, or regulated data;
• Ensure secure logging, monitoring, audit trails, and evidence of control effectiveness;
• Contribute to AI security governance, standards, and secure-by-design patterns;

What can you expect?

• Hybrid working model;
• National and international projects;
• Health Insurance Benefit for all employees;
• A fair system of competitive rewards upon knowledge and experience;
• Certification, technical and behavioral training to become the best version of yourself;
• Team Building and Happy Hours;
• Committed and successful teams;
• Opportunity to work in a challenging environment with dynamic teams and innovative projects;
• Promotion of happiness, well-being at work, and physical and emotional health, with initiatives that allow a work-life balance culture;
• Benefit scheme along with partners.

In line with our diversity, equity, and inclusion policy, at ITSector we value the creation of a work environment where every employee is treated with dignity and where every opinion matters. We believe that diversity makes us stronger and contributes to the innovation and success of our teams.

In ITSector there is no room for any potential bias, from the Talent Acquisition process till the Career & Development of our employees, diversity and inclusion, regardless of age, gender, ethnicity, race, nationality or any form of discrimination incompatible with dignity of human rights are our key drivers.