AI Security Architect & Threat Modeling Lead

DXC Technology Company; Richmond (VA); Hybrid; USD 144,000 - 267,000; Full time

Job summary

DXC Technology is seeking an experienced security architect focused on AI/ML security to design secure AI/ML ecosystems, perform threat modeling, and guide governance across enterprise platforms. The role emphasizes secure-by-design architecture, risk assessment, and collaboration with cross‑functional teams in a US-based setting.

The position requires deep knowledge of MITRE ATLAS, OWASP Top 10 for LLMs, and NIST AI RMF, with hands-on experience in securing AI‑assisted software development.

Qualifications

• 8+ years of experience in information security or enterprise architecture, with recent focus on AI/ML or Generative AI security.
• Must be authorized to work in the US without requiring sponsorship now nor in the future
• Proven experience performing secure architecture assessments, design reviews, and threat models for complex, integrated systems.
• Broad experience across cloud platforms (AWS), identity, key management, secrets management, networking, containers, and API security.
• Deep knowledge of Agentic AI, autonomous agents, threat modeling, and security frameworks (MITRE ATLAS, OWASP LLM Top 10, NIST AI RMF) for ML and AI systems
• Experience securing AI‑assisted software development and agentic systems, including AI coding assistants, agent frameworks, tool/MCP integrations, and the controls needed for safe enterprise use of AI in building applications and agents.
• Expertise in interpreting and applying internal security policies, standards, and controls.
• Strong communication skills with the ability to convey complex technical concepts to technical and non technical audiences, including senior leadership.
• Demonstrated ability to drive decisions, collaborate across teams, and balance risk vs. business needs.
• Hands‑on experience preparing technical diagrams and threat models.

Responsibilities

• Security Architecture & Solution Design: Develop secure design patterns and controls for AI/ML solutions.
• Security Architecture & Solution Design: Define secure operating environment and ensure alignment with enterprise architecture strategy and GIS standards.
• Security Architecture & Solution Design: Evaluate system impacts, data flows, integration points, and non‑functional requirements such as security.
• Security Architecture & Solution Design: Provide solution options to resolve architectural constraints and remove design impediments.
• Security Architecture & Solution Design: Participate in design reviews, feature decomposition, and technical governance for AI-enabled platforms and SDLC-integrated developer tools (e.g., GitHub Copilot, Microsoft Copilot Studio).
• AI/ML Security, Threat Modeling & Risk Assessments: Conduct AI‑specific risk assessments using frameworks including MITRE ATLAS, OWASP Top 10 for LLMs/GenAI, and NIST AI RMF.
• AI/ML Security, Threat Modeling & Risk Assessments: Perform detailed threat modeling (STRIDE or equivalent) for cloud, application, data, and AI use cases.
• AI/ML Security, Threat Modeling & Risk Assessments: Identify risks such as prompt injection, model/data poisoning, data leakage, model theft, hallucinations, and supply chain risk across model, dataset, and embedding ecosystems.
• AI/ML Security, Threat Modeling & Risk Assessments: Define compensating controls and architectural safeguards for AI/ML pipelines, including input/output filtering, retrieval restrictions, data minimization, privacy controls, and identity boundaries.
• Collaboration & Governance: Work across lines of business, operations, enterprise architecture, data science, and development teams to ensure clear solution intent and secure‑by‑design outcomes.
• Collaboration & Governance: Translate policy and standards into actionable architecture guidance for delivery teams.
• Collaboration & Governance: Educate partners on architectural best practices, security control requirements, and evolving AI threat landscapes.
• Collaboration & Governance: Support technology stack evaluations and selection of secure tools, platforms, and third‑party integrations.
• Collaboration & Governance: Provide architecture review documentation, data flow diagrams, and risk summaries to support governance processes.

Skills

AI/ML security

Threat modeling

Security architecture

Cloud security

Communication

Leadership

Policy understanding

Tools

GitHub Copilot

Microsoft Copilot Studio

Job description

DXC Technology is seeking an experienced security architect focused on AI/ML security to design secure AI/ML ecosystems, perform threat modeling, and guide governance across enterprise platforms. The role emphasizes secure-by-design architecture, risk assessment, and collaboration with cross‑functional teams in a US-based setting.

The position requires deep knowledge of MITRE ATLAS, OWASP Top 10 for LLMs, and NIST AI RMF, with hands-on experience in securing AI‑assisted software development.