AI Cybersecurity Threat Monitoring Architect

KellyMitchell Group; Dallas (TX); Remote; USD 154,000 - 220,000; Full time

Benefits offered by this job

ESOP

401K

Job summary

KellyMitchell Group is recruiting an AI Cybersecurity Threat Monitoring Architect to lead threat modeling and AI security across travel and hospitality clients. The role emphasizes building AI threat models, telemetry, and security playbooks, with remote work from the USA for a 12-month contract that may extend.

The candidate will implement AI-focused detection, hunt playbooks, and cross-team collaboration with Threat Intelligence and Incident Response to strengthen detection coverage and

Qualifications

• Hands-on detection engineering, threat hunting, or incident response in enterprise environments.
• Experience with LLMs/Generative AI security and AI threat modeling is a plus.
• Direct experience building SIEM/SOAR use cases, including rules and playbooks.

Responsibilities

• Develop and pilot AI threat-modeling capabilities using OWASP, MITRE and MITRE ATLAS.
• Translate emerging AI threats into practical actions for security teams.
• Create AI attack scenarios and map them to preventive, detective and response controls.

Skills

Detection engineering

Threat hunting

Incident response

SOC monitoring

Adversary emulation

AI security

Cloud security AWS

Telemetry strategy

Education

Bachelor's degree

Tools

SIEM

SOAR

AWS security services

Job description

Job Summary

Our client, a leading Travel & Hospitality provider, is seeking a AI Cybersecurity Threat Monitoring Architect to join their team.

• Contract type and duration: 12 Month potential to extend
• Work location: USA
• Work Model: Remote

Core Responsibilities

• Develop and pilot AI threat-modeling capabilities using OWASP, MITRE and MITRE ATLAS
• Translate emerging AI threats, vulnerabilities and attack techniques into practical actions for security and technology teams
• Create AI attack scenarios and map them to preventive, detective and response controls
• Define telemetry and logging requirements across AI applications, models, data, identities, tools, APIs and integrations
• Build and tune SIEM/SOAR detections, correlation logic, alerts and operational-response playbooks using existing platforms
• Develop AI-focused threat-hunting playbooks and conduct initial hunts
• Partner with Threat Intelligence, Incident Response, Operations and adversary-emulation/Purple Team groups to test detection coverage and improve runbooks
• Assess current visibility and tooling, document gaps, prioritize improvements and establish coverage metrics
• Create durable processes, ownership, roadmaps and recommendations that integrate AI threat response into existing cybersecurity operations

Required Skills/Experience (Must-Haves)

• Demonstrated hands-on experience in several of the following: detection engineering, threat hunting, incident response, SOC monitoring, security architecture or adversary emulation
• Practical security experience with LLMs/Generative AI and exposure to agentic AI, MCP, API security or cloud-hosted AI services
• Direct experience building SIEM and SOAR use cases, including detection rules, correlation logic, alert pipelines and response playbooks
• Experience defining or using telemetry across cloud, application, API, data, endpoint or AI/ML workloads in AWS or hybrid environments
• Experience conducting threat modeling and mapping threats to preventive, detective and responsive controls
• Experience planning or participating in adversary-emulation and Purple Team exercises
• Ability to assess security capabilities, document gaps and recommend implementable tooling or process improvements
• Strong enterprise consulting skills: cross-functional decision leadership, detailed documentation and clear presentations to engineering and leadership audiences
• Experience in a complex, high-availability enterprise environment

Preferred Skills/Experience (Nice-to-Haves)

• Bachelor’s degree in cybersecurity, computer science, information systems, data science, engineering or equivalent experience
• CISSP, CCSP, GIAC, AWS Security Specialty, SIEM/incident-response/detection certifications or relevant AI-security training
• AWS AI-security experience and understanding of non-human identity/IAM concepts
• AI Threat Modeling Expertise
• Detection Engineering Proficiency
• Threat Hunting Mindset
• SIEM/SOAR Optimization
• Security Architecture Knowledge
• AI Security Risk Assessment
• Adversary Emulation Collaboration
• Telemetry & Logging Strategy
• Security Controls Mapping
• Work location: USA
• Work Model: Remote
• Pay Range: The approximate pay range for this position is between $154,000and $220,0000. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
• Employee-Owned Profit Sharing (ESOP)
• 401K offered

About KellyMitchell

At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.