AI Security Architecture VP-3

STATE STREET CORPORATION; Quincy (MA); On-site; USD 120,000 - 203,000; Full time

Job summary

STATE STREET CORPORATION is seeking an AI Security Architect to design, implement, and review security controls for AI/ML and Generative AI across the technology environment. This hands-on role partners with engineering, product security, and platform teams to deliver secure AI capabilities in alignment with regulatory requirements.

You will perform threat modeling, define guardrails, and integrate security into DevSecOps, cloud security, and software development life cycles while staying

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field.
• 5–7 years of experience in application security, product security, cloud security, or security engineering roles.
• Experience securing cloud-native applications or platforms in an enterprise environment.
• Exposure to AI/ML or data-driven systems, including model usage, APIs, or analytics platforms.
• Familiarity with secure software development practices and DevSecOps concepts.
• Experience working in or with regulated environments preferred.
• Solid technical fundamentals in security architecture and secure design.
• Curiosity and willingness to learn in a rapidly evolving AI security landscape.
• Ability to break down risks and communicate them clearly to engineers.
• Collaborative, execution-focused mindset.
• Comfortable working with guidance while progressively taking on more responsibility.

Responsibilities

• Design secure architecture patterns for AI/ML and Generative AI systems.
• Develop AI security standards, reference architectures, and guardrails.
• Participate in architecture and design reviews for AI initiatives with security guidance.
• Partner with engineering to embed security requirements early in design.
• Perform AI-focused threat modeling for AI services, models, and data flows.
• Identify security risks such as data leakage, prompt injection, insecure model access, OSS vulnerabilities, and misuse.
• Recommend mitigations and compensating controls with security partners.
• Integrate AI security controls into SDLC and DevSecOps workflows.
• Define security requirements and validation checks for AI pipelines and platforms.
• Develop repeatable patterns/templates for secure AI adoption.
• Review emerging AI capabilities and tools for security implications.
• Stay informed on AI security trends and report improvements.

Skills

AI security

Security architecture

DevSecOps

Cloud security

Application security

Education

Bachelor's degree in Computer Science / Information Security / Engineering

Security or cloud certifications (preferred)

Job description

Who we are looking forThe AI Security Architect is a hands-on technical role responsible for designing, implementing, and reviewing security controls for AI, machine learning, and generative AI solutions across State Street’s technology environment. This role partners closely with engineering, product security, and platform teams to help ensure AI capabilities are delivered securely, responsibly, and in alignment with regulatory requirements. This position is ideal for a security professional with strong foundations in application, cloud, or product security who is building deeper expertise in AI security architecture and risk management.Why this role is important to usGlobal Cybersecurity (GCS) protects State Street and its clients from the impact of cyber-attacks against systems by understanding the risks these attacks present and mitigating them through a robust, continuously evolving, cybersecurity program and control environment.Fusion & Security Operations (F&SO) is one of five functions that make up GCS. F&SO works to provide real-time knowledge of cyber threats of today collectively to better prepare State Street for threats of tomorrow.What you will be responsible forContribute to the design and implementation of secure architecture patterns for AI/ML and Generative AI systems, including data pipelines, model access, and AI-enabled applications.Support the development and documentation of AI security standards, reference architectures, and guardrails.Participate in architecture and design reviews for AI-related initiatives, providing security guidance under senior architect direction.Partner with engineering teams to ensure security requirements are considered early in solution design.Perform AI-focused threat modeling for AI services, models, and data flows.Identify security risks such as data leakage, prompt injection, insecure model access, OSS vulnerabilities, and misuse scenarios.Work with senior architects and security partners to recommend appropriate mitigations and compensating controls.Support integration of AI security controls into software development and DevSecOps workflows.Assist in defining security requirements and validation checks for AI pipelines and platforms.Help develop repeatable patterns and templates that enable teams to adopt AI securely with less friction.Assist with security reviews for emerging AI capabilities, including GenAI tools, internal AI services, and developer productivity use cases.Stay informed on AI security trends, tooling, and common risk patterns through research and internal knowledge sharing.Contribute ideas and observations on improving AI security practices across the organization.Ensure AI security designs align with internal policies and external standards (e.g., NIST, ISO, FFIEC concepts).Support audit, risk, and compliance efforts by helping document architecture decisions and controls.What we valueThese skills will help you succeed in this roleParticipate in post-incident reviews and action tracking for AI-related security events.Work closely with security engineering, product security, platform, and data teams to resolve AI security concerns.Communicate technical risks and recommendations clearly to engineering audiences.Escalate complex or high-risk issues to senior architects with supporting analysis and options.Education & Preferred QualificationsBachelor’s degree in Computer Science, Information Security, Engineering, or a related field.Relevant security or cloud certifications are a plus.5–7 years of experience in application security, product security, cloud security, or security engineering roles.Experience securing cloud-native applications or platforms in an enterprise environment.Exposure to AI/ML or data-driven systems, including model usage, APIs, or analytics platforms.Familiarity with secure software development practices and DevSecOps concepts.Experience working in or with regulated environments preferred.Solid technical fundamentals in security architecture and secure design.Curiosity and willingness to learn in a rapidly evolving AI security landscape.Ability to break down risks and communicate them clearly to engineers.Collaborative, execution-focused mindset.Comfortable working with guidance while progressively taking on more responsibility.Salary Range:$120,000 - $202,500 AnnualThe range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.For a full overview, visit https://hrportal.ehr.com/statestreet/Home .About State StreetAcross the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.Discover more information on jobs at StateStreet.com/careersRead our CEO StatementJob Application Disclosure:It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.