Principal AI Security Architect

Colonial Group; Buffalo (NY); On-site; USD 180,000 - 260,000; Full time

Job summary

ACV Auctions is seeking a Principal Architect, Product Security to secure how we build and ship AI across the Product Security team. You will define target-state secure architecture for AI/ML systems, guard rails for coding assistants and agents, and lead security testing efforts across the AI surface.

You will mentor engineers, collaborate with governance, and drive multi-year AI security strategy while ensuring secure-by-default development practices and regulatory alignment.

Qualifications

• Deep experience in AI/LLM security and application security.
• Hands-on GenAI/LLM security with production work or verifiable projects.
• Reads/writes Python; uses AI security tooling.
• Fluent in OWASP Top 10 for LLM and Agentic Applications; MITRE ATLAS; NIST AI RMF.

Responsibilities

• Define target-state secure architecture for AI/ML systems.
• Protect integrity of vision-based condition and pricing pipelines; collaborate on detection and provenance controls.
• Set secure-by-default standards across engineering for AI development.
• Threat model and review high-risk AI and application designs.
• Stand up AI security testing capability; adversarial testing and red-teaming.
• Advise on multi-year AI security strategy with governance alignment.
• Scale AI security expertise across engineering and mentoring.

Skills

LLM security

Security architecture

Python

MITRE ATLAS

OWASP LLM Top 10

Red-teaming

Kubernetes

AWS cloud security

Garak

PyRIT

promptfoo

Education

Bachelor's degree or commensurate experience

Tools

Garak

PyRIT

promptfoo

Job description

ACV Auctions is seeking a Principal Architect, Product Security to secure how we build and ship AI across the Product Security team. You will define target-state secure architecture for AI/ML systems, guard rails for coding assistants and agents, and lead security testing efforts across the AI surface.

You will mentor engineers, collaborate with governance, and drive multi-year AI security strategy while ensuring secure-by-default development practices and regulatory alignment.