AI Security Architect & Threat Modeling Lead

01460 Continental Casualty Company; Chicago (IL); Hybrid; USD 97,000 - 189,000; Full time

Benefits offered by this job

Benefits package

Job summary

CNA is seeking a Consulting Director, AI Security to provide hands-on security expertise across AI/ML, GenAI, LLM, and agentic solutions. You will review architectures, write evaluation criteria for RFIs/RFPs, benchmark security solutions, and lead threat modeling.

The role partners with multiple security and engineering teams to embed secure AI practices across the enterprise. Ideal candidates have a Bachelor’s degree and 5+ years in information security, with strong cloud security, DevSecOps,

Qualifications

• Bachelor’s degree in a technical discipline.
• 5+ years of information security experience, incl. cloud/AI/ML.
• Public cloud security experience with AWS/Google Cloud.
• Relevant certifications (CISSP, CCSP, GIAC, AI/cloud security).

Responsibilities

• Review AI/ML/GenAI/LLM security initiatives and provide risk-focused input.
• Conduct architecture and design reviews of AI-enabled solutions.
• Develop evaluation criteria for RFIs/RFPs in AI security tooling.
• Perform threat modeling and security risk assessments of AI systems and data pipelines.
• Support SDLC, CI/CD, and DevSecOps with security controls integration.
• Assist with vulnerability management and security monitoring for AI workloads.

Skills

AI/ML security

Security architecture

Cloud security

DevSecOps

Threat modeling

Education

Bachelor's degree

Tools

AWS

Google Cloud

Job description

CNA is seeking a Consulting Director, AI Security to provide hands-on security expertise across AI/ML, GenAI, LLM, and agentic solutions. You will review architectures, write evaluation criteria for RFIs/RFPs, benchmark security solutions, and lead threat modeling.

The role partners with multiple security and engineering teams to embed secure AI practices across the enterprise. Ideal candidates have a Bachelor’s degree and 5+ years in information security, with strong cloud security, DevSecOps,