GenAI Security Architect - App Security & AI Risk

Talenzaa; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Talenzaa in New York, NY seeks a senior security architect focused on application security and security architecture to lead risk assessments and design secure systems. You will work across teams on threat modeling, secure SDLC, and cloud security (AWS/GCP), including IAM, OAuth2/OIDC, and JWT.

Strong communication with stakeholders and hands-on implementation are expected. Experience with GenAI/LLM security, API security, SAST/DAST/SCA tooling, and infrastructure as code is a plus; you will

Qualifications

• 12+ years of experience in Application Security / Security Architecture.
• Strong knowledge of OWASP, Threat Modeling, Secure SDLC, API Security, SAST/DAST/SCA.
• Experience with AWS/GCP, Kubernetes, Docker, CI/CD, Terraform.
• Strong understanding of OAuth2, OIDC, JWT, IAM, RBAC/ABAC.
• Experience with GenAI/LLM, RAG, Agentic AI, or AI Security.
• Knowledge of LangChain/LangGraph, vector databases, and AI security controls is a plus.
• Strong communication and stakeholder management skills.

Skills

Security architecture

Application Security

Threat modeling

Secure SDLC

API security

SAST/DAST/SCA

Cloud security (AWS/GCP)

Kubernetes

Docker

CI/CD

Terraform

OAuth2/OIDC/JWT

IAM/RBAC/ABAC

GenAI/LLM security

LangChain/LangGraph

Vector databases

AI security controls

Stakeholder management

Communication

Tools

AWS

GCP

Kubernetes

Docker

CI/CD

Terraform

OAuth2

OIDC

JWT

IAM

RBAC/ABAC

LangChain

LangGraph

Vector databases

Job description

Talenzaa in New York, NY seeks a senior security architect focused on application security and security architecture to lead risk assessments and design secure systems. You will work across teams on threat modeling, secure SDLC, and cloud security (AWS/GCP), including IAM, OAuth2/OIDC, and JWT.

Strong communication with stakeholders and hands-on implementation are expected. Experience with GenAI/LLM security, API security, SAST/DAST/SCA tooling, and infrastructure as code is a plus; you will