AI Security Architect — Secure AI/ML Lifecycle

HITEC; Denver (CO); On-site; USD 142,000 - 203,000; Full time

Benefits offered by this job

Discretionary incentives

Annual bonus plan

Job summary

Bank of America is seeking an AI Security Standards Architect in Denver to lead the security strategy for AI/ML systems across data, models, APIs, and integrations. You will identify AI-specific risks such as prompt injection and data leakage, partnering with engineering, risk, and business teams to implement threat modeling, controls, and continuous monitoring.

The role requires 5+ years in cybersecurity with AI/ML experience and knowledge of MITRE ATLAS, OWASP for GenAI, and NIST AI RMF;

Qualifications

• 5+ years of cybersecurity experience with AI/ML focus.
• Deep knowledge of Generative AI/LLMs and assessment frameworks (MITRE ATLAS, OWASP Top 10 for GenAI, NIST AI RMF).
• Understanding of AI governance, policies, and controls for AI use cases.

Responsibilities

• Define and lead the AI security strategy across data, models, APIs, and integrations.
• Identify and mitigate AI-specific risks like model abuse and data leakage.
• Partner with engineering, risk, and business teams to operationalize secure AI practices.
• Define security requirements ensuring traceability between controls, risks, and governance.
• Monitor security trends and keep leadership informed.

Skills

AI security

Threat modeling

Executive communication

Cloud security

AI/LLM risk assessment

Cross-functional collaboration

Education

Bachelor's/Master’s in CS/IT or related field

Job description

Bank of America is seeking an AI Security Standards Architect in Denver to lead the security strategy for AI/ML systems across data, models, APIs, and integrations. You will identify AI-specific risks such as prompt injection and data leakage, partnering with engineering, risk, and business teams to implement threat modeling, controls, and continuous monitoring.

The role requires 5+ years in cybersecurity with AI/ML experience and knowledge of MITRE ATLAS, OWASP for GenAI, and NIST AI RMF;