Security Architect

Openkyber; Alaska; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Openkyber is seeking a Security Architect specializing in AI cybersecurity threat monitoring to establish threat response capabilities across GenAI ecosystems.

You will integrate AI threat modeling, detection engineering, and incident response into SOC/IR workflows, collaborating with leadership to map risks and guide investments.

Qualifications

• Bachelor's degree in Cybersecurity, CS, or related field.
• Experience securing GenAI, LLMs, MCP, and AI APIs.
• Hands-on with SIEM/SOAR, threat hunting, and incident response.
• Knowledge of MITRE ATLAS, NIST AI RMF, OWASP Top 10 for LLM Apps.
• Strong executive communication and cross-functional leadership.

Responsibilities

• Define and pilot an AI Threat Modeling capability aligned to MITRE ATLAS.
• Design and tune high-fidelity AI detection rules and playbooks.
• Lead AI threat hunting across GenAI platforms and cloud.
• Define telemetry, logging, and observability for AI systems.
• Partner with Purple Teams to validate AI defense controls.
• Collaborate with IR to refine AI runbooks and forensics.

Skills

SOC Monitoring

Threat Hunting

Detection Engineering

SIEM/SOAR

AI/LLM Security

Threat Modeling

Purple Teaming

Executive Communication

Education

Bachelor's degree in Cybersecurity/CS/related field

Advanced degree preferred

Tools

AWS Cloud

MCP

Job description

Job Title: Security Architect

Location: Dallas, TX (2-3 Days Onsite in a week) Duration: FTE

Job Description:

We are seeking a Security Architect specializing in AI Cybersecurity Threat Monitoring to establish and operationalize threat response capabilities targeting and leveraging AI systems. This role focuses on identifying, detecting, investigating, hunting, and responding to emerging threats across enterprise GenAI, agentic AI, foundation models, data sources, non-human identities, Model Context Protocol (MCP), and tool integrations. Rather than siloing AI security, the Architect will integrate AI threat response, threat modeling, and detection engineering into existing SOC, IR, and Threat Hunting workflows using industry frameworks such as MITRE ATLAS , NIST AI RMF , and OWASP Top 10 for LLM Applications . This individual must move seamlessly between threat research, architecture roadmapping, and hands-on detection engineering.

Key Responsibilities:

• AI Threat Modeling & Attack Scenarios: Define and pilot an AI Threat Modeling capability; build a comprehensive library of AI attack scenarios mapped to the MITRE ATLAS framework to support Purple Teaming and Adversary Emulation.
• Detection Engineering & SIEM/SOAR: Design, build, test, and tune high-fidelity AI detection rules, correlation logic, and automated response playbooks within enterprise SIEM/SOAR platforms.
• AI Threat Hunting: Build proactive, AI-focused threat hunting playbooks and execute targeted hunts across enterprise GenAI platforms, cloud environments, and AI APIs.
• Telemetry & Logging Architecture: Define telemetry, logging, and observability requirements across AI systems (e.g., token usage, prompt/response telemetry, MCP integrations) and lead gap analyses to expand SOC visibility.
• Adversary Emulation & Purple Teaming: Partner with Threat Informed Defense and Purple Teams to validate AI-specific attack paths, test defense effectiveness, and tune alerting thresholds.
• Incident Response & Forensics Support: Collaborate with the IR team to author and refine AI-specific runbooks, investigation workflows, and digital forensics/evidence-gathering standards.
• Strategic Roadmapping & Executive Advisory: Conduct organizational readiness assessments, track emerging AI attack vectors, and present risk mitigation roadmaps and investment recommendations to technology leadership.

Required Skills:

• Security Operations, Detection Engineering & Threat Hunting: Deep background in SOC monitoring, detection engineering, SIEM/SOAR rule creation, alerting pipelines, and threat hunting workflows.
• AI & LLM Cybersecurity: Hands-on experience securing Generative AI, Agentic AI, Large Language Models (LLMs), Model Context Protocol (MCP), and AI APIs-especially within AWS cloud environments.
• Framework Proficiency: Practical application of MITRE ATLAS , OWASP for LLM Applications , and NIST AI RMF for threat modeling and control mapping.
• Purple Teaming & Adversary Emulation: Experience designing and testing attack scenarios against AI workloads to validate defensive controls.
• Telemetry & Observability Strategy: Proven ability to architect logging, telemetry pipelines, and data visibility requirements for cloud and AI/ML workloads.
• Non-Human Identity & Access Management: Understanding of security best practices for AI service accounts, automated agents, API tokens, and machine-to-machine integrations.
• Cross-Functional Architecture & Stakeholder Leadership: Experience driving security architecture reviews, leading executive briefings, and translating complex AI risks into business decisions.

Education:

Education: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Engineering, or equivalent practical experience. Advanced degree preferred.

Preferred Certifications:

Security Architecture & Leadership: CISSP, CCSP, GIAC (e.g., GDSA, GCIA, GCIH), or AWS Certified Security Specialty. AI Security & Governance: Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM), CompTIA Security AI+, or equivalent specialized training. Cloud & AI Fundamentals: AWS Certified AI Practitioner, AWS Certified Cloud Practitioner.

Work Style & Core Competencies

Strong analytical mindset to parse complex telemetry and detect subtle, novel adversary techniques. Executive-level communication skills to present roadmaps, project health, and threat intelligence to Directors, VPs, and engineering peers. Collaborative and adaptable in fast-moving Agile environments with shifting enterprise priorities.