Sec Ops Architect I
o9 Solutions
Get more replies from employers
Send a job-specific resume in minutes.
Job summary
o9 Solutions is seeking a Senior AI Security & MLSecOps Architect to own the security architecture for its GenAI platform. You will design agent identity controls, SBOM pipelines, and RAG security, while aligning with ISO/NIST/OWASP standards across the enterprise.
You will build ML models for security telemetry, deploy autonomous security agents, and lead threat detection efforts across multi‑cloud environments.
Qualifications
- 10+ years progressive hands-on cybersecurity engineering, AI security, or security data science.
- 3+ years AI security / MLSecOps in production environments.
- Experience building autonomous agents and ML-enabled security workflows.
Responsibilities
- Own the security architecture for o9’s GenAI platform with governance and auditable controls.
- Design and enforce agent identity controls and behavioural baselining for production AI agents.
- Architect the AIBOM/SBOM pipeline ensuring signed inventory entries for every production model.
- Create security controls for RAG pipelines including allowlisting and data classification.
- Define security review gates for AI integrations with enterprise systems and enforce token governance.
- Align security controls to ISO 42001, NIST AI RMF, MITRE ATLAS, OWASP Top 10 for LLM Apps.
- Build ML models that translate security telemetry into actionable defense.
- Develop autonomous security agents for threat hunting, vulnerability management, and incident response.
- Lead threat detection and anomaly modelling mapped to MITRE ATT&CK.
- Provide shift-left DevSecOps integration; instrument services from day one.
- Serve as technical authority for AI security and MLSecOps; mentor engineers.
Skills
Education
Tools
Job description
Technology — AI Trust & Cyber Security | Bangalore, India | Full-Time
Transforming the Future of Enterprise Planning At o9, our mission is to be the Most Value-Creating Platform for enterprises by transforming decision-making through our AI-first approach. By integrating siloed planning capabilities and capturing millions—even billions—in value leakage, we help businesses plan smarter and faster. This not only enhances operational efficiency but also reduces waste, leading to better outcomes for both businesses and the planet. Global leaders like Google, PepsiCo, Walmart, T‑Mobile, AB InBev, and Starbucks trust o9 to optimize their supply chains.
Transforming the Future of Enterprise Planning At o9, our mission is to be the Most Value-Creating Platform for enterprises by transforming decision‑making through our AI-first approach. By integrating siloed planning capabilities and capturing millions— even billions—in value leakage, we help businesses plan smarter and faster. Global leaders like Google, PepsiCo, Walmart, T‑Mobile, AB InBev, and Starbucks trust o9 to optimize their supply chains.
Own the security architecture for o9’s GenAI platform — ensuring every AI agent, model, and integration is governed, auditable, and stoppable.
Design and enforce agent identity controls, permission scoping, and behavioural baselining for all production AI agents. Build UEBA‑style models that detect when an agent deviates from learned tool‑call patterns, data‑access scope, or egress destinations — triggering automated containment via kill‑switch controls.
Architect the AI Bill of Materials (AIBOM/SBOM) pipeline — model provenance verification, hash integrity, dependency scanning, and supply chain trust for every LLM, embedding model, and agent deployed to production. Ensure no model reaches production without a signed inventory entry.
Design security controls for retrieval‑augmented generation pipelines — source allowlisting, tenant isolation, PII scrubbing, indirect prompt injection detection, and embedding anomaly monitoring. Secure the retrieval boundary as the highest‑risk component in the AI stack.
Define security review gates for AI integrations with enterprise systems (ticketing, DevOps, observability, MCP servers). Enforce token governance, credential rotation, blast‑radius modelling, and data classification for every cross‑system data flow.
Align AI security controls to ISO 42001, NIST AI RMF, MITRE ATLAS, and OWASP Top 10 for LLM Applications. Maintain audit trails for every model decision. Support EU AI Act and DPDPA compliance evidence generation.
Build ML models and autonomous agents that convert raw security telemetry into predictive, actionable defence.
Build, fine‑tune, and deploy ML models that detect anomalous patterns, novel attack variations, and stealthy TTPs mapped to MITRE ATT&CK across the full telemetry corpus — including predictive weak‑point analysis that scores which assets or identities are most likely to be exploited next.
Architect and build the autonomous security agent layer — threat‑hunting agents, vulnerability‑management agents, configuration‑audit agents, and incident‑response agents operating at machine speed. Define full observability: reasoning traces, tool calls, results, and outputs — tamper‑proof and forensically auditable.
Evolve SOAR playbooks from rule‑based automation to ML‑driven, context‑aware orchestration — integrating LLM‑based enrichment into triage and response decision loops. Reduce false‑positive rates (target: <20%) while preserving detection fidelity.
Build ML‑powered identity risk scoring on top of identity protection telemetry — reducing identity threat risk scores and maintaining them autonomously through continuous model retraining from red team findings.
Ensure scalable, real‑time security visibility across o9’s entire infrastructure and customer environment footprint.
Design scalable, real‑time pipelines that ingest, normalise, and correlate high‑velocity security telemetry from EDR, WAF/ZTNA, PAM, cloud environments (AWS, Azure, GCP), and DevOps toolchains into a unified, enriched security data model.
Build cross‑platform correlation logic joining identity signals, endpoint behavioural data, network events, and privileged‑access telemetry. Author detection rules and tuning frameworks that reduce noise while preserving true‑positive fidelity.
Embed security telemetry and policy‑as‑code requirements into the CI/CD pipeline so every new service, agent, and integration is observable from day one — not instrumented retrospectively. Integrate ML enrichment into vulnerability exposure scoring with predictive remediation prioritisation.
Serve as the technical authority for AI security and MLSecOps across the security programme — defining standards, reviewing architectures, and raising AI security maturity across the organisation.
Serve as the technical authority for AI security and MLSecOps across the security programme — defining standards, reviewing architectures, and raising AI security maturity across the organisation.
Evaluate emerging AI security techniques (agent‑based threat hunting, LLM‑powered forensics, graph‑ML for lateral movement detection, neurosymbolic trust boundaries) and translate research into production capabilities.
Coach security engineers in ML/AI fundamentals and ML engineers in security domain knowledge — building a team that bridges both disciplines.
- 10+ Years Overall: Progressive hands‑on experience in cybersecurity engineering, AI security, or security data science — with a foundational identity as a software engineer who developed deep security expertise.
- 3+ Years AI Security / MLSecOps: Proven experience in AI platform security (agent governance, model risk, RAG security) or building and operationalising ML models for security use cases at production scale.
- AI Agent Engineering: Demonstrated experience building autonomous agents using frameworks such as CrewAI, LangChain, LangGraph, or equivalent — including tool‑use, multi‑agent orchestration, and agent observability.
- Security Platform Depth: Hands‑on experience with enterprise security platforms — EDR, NG‑SIEM, SOAR, WAF/ZTNA, PAM, or equivalents at comparable scale.
- Cloud & Kubernetes: Deep experience securing large‑scale containerised environments across AWS, Azure, and GCP — with exposure to multi‑tenant SaaS architectures.
- Technical Skills Languages & Data Engineering: Python for ML model development, pipeline authoring, and security automation. Streaming and batch platforms (Spark, Kafka, Elasticsearch, or equivalent).
- ML Frameworks & LLM Integration: ML frameworks (scikit‑learn, XGBoost, PyTorch) and LLM/agent orchestration (LangChain, CrewAI). Experience integrating LLM APIs into security workflows via prompt engineering and RAG pipelines.
- Security Frameworks: MITRE ATT&CK, MITRE ATLAS, OWASP Top 10 for LLM Applications, NIST AI RMF, ISO 42001, ISO 27001. Ability to map AI risks and ML model outputs to specific TTPs.
- Observability & MLOps: ML model lifecycle management (MLflow or equivalent), experiment tracking, model drift detection, and production monitoring for security ML models.
- Education: Bachelor’s in Computer Science, Software Engineering, or related discipline required; Master’s in CS, Data Science, AI, or Cybersecurity highly preferred.
- Certifications: Relevant certifications are a strong plus: cloud security specialties (AWS/Azure/GCP), CISM, MITRE ATT&CK Defender, or SANS AI/ML security courses. We value demonstrated hands‑on capability over certification count.
With a $3.7 billion valuation and a global presence across Dallas, Amsterdam, Barcelona, Madrid, London, Paris, Tokyo, Seoul, and Munich, o9 is among the fastest‑growing technology companies in the world. Our security organisation holds the #1 BitSight ranking in our peer group — protecting 500+ customer environments across 60+ countries, 176,000+ hosts, and 6M+ lines of code under continuous CI/CD security.
o9 is an equal‑opportunity employer that values diversity and inclusion. We welcome applicants from all backgrounds, ensuring a fair and unbiased hiring process.
This position at o9 Solutions has an annual salary range of $169,793-$233,466. Additionally, you may be eligible to participate in our medical, retirement, and other company‑sponsored benefits. **The above information reflects the expected base salary range, although the lower and upper bounds may vary based on location, skills, experience, certifications, licenses, or other relevant factors.
At o9, transparency and open communication are at the core of our culture. Collaboration thrives across all levels—hierarchy, distance, or function never limit innovation or teamwork.
Beyond work, we encourage volunteering opportunities, social impact initiatives, and diverse cultural celebrations. With a $3.7 billion valuation and a global presence across Dallas, Amsterdam, Barcelona, Madrid, London, Paris, Tokyo, Seoul, and Munich, o9 is among the fastest‑growing technology companies in the world.
Through our aim10x vision, we are committed to AI‑powered management, driving 10x improvements in enterprise decision‑making. Our Enterprise Knowledge Graph enables businesses to anticipate risks, adapt to market shifts, and gain real‑time visibility. By automating millions of decisions and reducing manual interventions by up to 90%, we empower enterprises to drive profitable growth, reduce inefficiencies, and create lasting value. o9 is an equal‑opportunity employer that values diversity and inclusion. We welcome applicants from all backgrounds, ensuring a fair and unbiased hiring process.
We have a vision. Our Digital Brain, o9’s AI‑powered platform, is being used by global enterprises to drive their digital transformations. The integrated planning and operational efficiencies we provide is helping businesses do more, be more and mean more to the world at large. Because businesses that plan better, reduce waste, creating value for themselves and the planet. But we also have a vision for our people. We want the most talented, committed and driven people to power our transformative approach. As an individual and in a team, your actions reflect our values. In return, we’ll provide a nurturing environment where you can be a part of something special.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
