AI Security Architect

Sysmatch; Portugal; Remote; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Personalized onboarding

Regular feedback

Dynamic international project

Competitive salary package

Career development opportunities

Collaborative culture

Exclusive discounts network

Team-building events

Job summary

Sysmatch is seeking an AI Security Architect for a remote role based in Portugal. You will review GenAI use cases, define security requirements for platforms, APIs, and data flows, and perform architecture reviews and threat modelling to ensure robust controls.

Collaborating with security, product, engineering, and data teams, you will implement auditable guardrails, strengthen data protection, and drive secure-by-design practices across AI solutions.

Qualifications

• Background in cybersecurity, ideally application security, product security, cloud security, or security architecture.
• Understanding GenAI / LLM-based solutions from a security and risk perspective.
• Experience with security reviews, architecture reviews, threat modelling, and defining technical controls.
• Experience with IAM, API security, secrets management, logging, monitoring, and control validation.
• Knowledge of data protection, privacy, data minimization, and secure handling of sensitive data.
• Ability to challenge technical implementations and validate that controls are effectively applied.

Responsibilities

• Support and review AI/GenAI use cases from design through production.
• Define security requirements for AI platforms, APIs, agents, tool use, and integrations.
• Perform architecture reviews, threat modelling, and security reviews of AI solutions.
• Validate integrations and deployments against security, privacy, logging, and auditability requirements.
• Identify and mitigate risks such as data leakage, unsafe tool use, and unbounded consumption.
• Define guardrails for data usage, especially for sensitive data, and ensure secure logging and audit trails.
• Contribute to AI security governance, standards, and secure-by-design patterns.

Skills

Cybersecurity

Application security

Cloud security

Security architecture

GenAI / LLM security

Threat modelling

IAM & API security

Logging & monitoring

Tools

Databricks

AWS

Azure

Job description

With over 25 years of experience, Sysmatch is a well-established name in IT Consultancy and Outsourcing, involved in both national and international projects that promote excellence in technology and services. Our secret? A team that blends talent, creativity, and experience to deliver robust, scalable, and tailored solutions.

We’re not just tech experts — we’re partners who support our clients’ transformation, anticipate trends, and drive their evolution. Flexibility, innovation, and a forward-thinking mindset are part of our DNA.

AI Security Architect – Remote (Candidates must be based in Portugal)

What we are looking for

Key Responsibilities:

• Support and review AI/GenAI use cases from design through production
• Define security requirements for AI platforms, APIs, agents, tool use, and integrations
• Perform architecture reviews, threat modelling, and security reviews of AI solutions
• Validate integrations and deployments against security, privacy, logging, and auditability requirements
• Identify and mitigate risks such as:
• Sensitive information disclosure / data leakage
• Unsafe tool use / excessive agency
• Abusive or unbounded consumption
• Insecure integrations or poisoned inputs
• Define guardrails for data usage, especially for sensitive, personal, confidential, or regulated data
• Ensure secure logging, monitoring, audit trails, and evidence of control effectiveness
• Contribute to AI security governance, standards, and secure-by-design patterns

Required Experience:

• Background in cybersecurity, ideally application security, product security, cloud security, or security architecture
• Understanding of GenAI / LLM-based solutions from a security and risk perspective
• Experience with security reviews, architecture reviews, threat modelling, and defining technical controls
• Experience with IAM, API security, secrets management, logging, monitoring, and control validation
• Knowledge of data protection, privacy, data minimization, and secure handling of sensitive or regulated data
• Ability to challenge technical implementations and validate that controls are effectively applied

Preferred Experience

• Familiarity with AWS and/or Azure environments in the context of AI workload security
• Exposure to AWS Bedrock, Azure OpenAI / Azure AI Foundry, or similar GenAI platforms, especially around:
  • Guardrails and content controls
  • IAM and least privilege
  • Logging, observability, and auditability
  • Data protection and sensitive data handling
  • Familiarity with Databricks as a platform to review from a security perspective, including:
    • Access control and data permissions
    • Workspaces, jobs, pipelines, and notebooks
    • Secrets, networking, and data governance
• Familiarity with:
  • OWASP Top 10 for LLM Applications / Agentic AI
  • SAIF (Secure AI Framework)
  • Model Context Protocol (MCP) and agent-to-tool security considerations
  • Agent-to-Agent (A2A) architectures and agentic trust boundaries
  • Emerging risk taxonomies such as MCP-38
  • Exposure to DevSecOps and/or MLOps as a collaboration context

Core Skills:

• Can translate AI security risks into clear technical requirements
• Strong risk identification, prioritisation, and decision-making
• Able to challenge and validate implementations effectively
• Works well with security, product, engineering, and data teams
• Focused on practical, enforceable, and auditable controls

What we offer

• A personalized onboarding experience that welcomes and supports you throughout your journey.
• Regular and constructive feedback to boost your growth and development.
• A dynamic project with a prestigious international client.
• A competitive salary package, aligned with your experience and skills.
• Career development opportunities through ambitious and innovative tech projects.
• A collaborative culture that values creativity and individual progress.
• Access to exclusive discounts in a wide network of partners, including health, wellness, travel, culture, gastronomy, leisure and much more.
• Team-building events and initiatives that create memorable shared experiences.