Security Architect

Openkyber, LLC; Atlanta (GA); On-site; USD 180,000 - 230,000; Full time

Job summary

Openkyber, LLC is seeking a Security Architect to establish and operationalize AI cybersecurity threat monitoring across enterprise GenAI, agentic AI, and foundation models. You will integrate AI threat response, threat modeling, and detection engineering into SOC, IR, and Threat Hunting workflows.

The role requires deep expertise in MITRE ATLAS, OWASP for LLM Applications, and NIST AI RMF, with hands-on detection engineering and adversary emulation. Onsite 2-3 days/week in Dallas, TX.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Engineering or equivalent practical experience.
• Advanced degree preferred in a relevant field.

Responsibilities

• Define and pilot an AI Threat Modeling capability; build a library of AI attack scenarios mapped to MITRE ATLAS for Purple Teaming.
• Design, build, test, and tune high-fidelity AI detection rules, correlation logic, and automated response playbooks in SIEM/SOAR.
• Build proactive AI-focused threat hunting playbooks and execute targeted hunts across GenAI platforms, cloud environments, and AI APIs.
• Define telemetry, logging, and observability requirements across AI systems and lead gap analyses to expand SOC visibility.
• Partner with Threat Informed Defense and Purple Teams to validate AI-specific attack paths and tune alerting.
• Collaborate with IR to author AI-specific runbooks, investigation workflows, and forensics standards.
• Present risk mitigation roadmaps and investment recommendations to technology leadership.

Skills

SOC Monitoring

Detection Engineering

Threat Hunting

SIEM/SOAR

AI/Cybersecurity

LLM Security

MITRE ATLAS

OWASP LLM

NIST AI RMF

Adversary Emulation

Telemetry & Observability

Non-Human Identity

Executive Communication

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science

Advanced degree preferred

Tools

AWS Cloud

MCP

SIEM Solutions

SOAR Platforms

Job description

Job Title: Security Architect

Location : Dallas, TX (2-3 Days Onsite in a week) Duration : FTE

Job Description: We are seeking a Security Architect specializing in AI Cybersecurity Threat Monitoring to establish and operationalize threat response capabilities targeting and leveraging AI systems. This role focuses on identifying, detecting, investigating, hunting, and responding to emerging threats across enterprise GenAI, agentic AI, foundation models, data sources, non-human identities, Model Context Protocol (MCP), and tool integrations. Rather than siloing AI security, the Architect will integrate AI threat response, threat modeling, and detection engineering into existing SOC, IR, and Threat Hunting workflows using industry frameworks such as MITRE ATLAS , NIST AI RMF , and OWASP Top 10 for LLM Applications . This individual must move seamlessly between threat research, architecture roadmapping, and hands‑on detection engineering.

Key Responsibilities:

• AI Threat Modeling & Attack Scenarios: Define and pilot an AI Threat Modeling capability; build a comprehensive library of AI attack scenarios mapped to the MITRE ATLAS framework to support Purple Teaming and Adversary Emulation.
• Detection Engineering & SIEM/SOAR: Design, build, test, and tune high-fidelity AI detection rules, correlation logic, and automated response playbooks within enterprise SIEM/SOAR platforms.
• AI Threat Hunting: Build proactive, AI-focused threat hunting playbooks and execute targeted hunts across enterprise GenAI platforms, cloud environments, and AI APIs.
• Telemetry & Logging Architecture: Define telemetry, logging, and observability requirements across AI systems (e.g., token usage, prompt/response telemetry, MCP integrations) and lead gap analyses to expand SOC visibility.
• Adversary Emulation & Purple Teaming: Partner with Threat Informed Defense and Purple Teams to validate AI-specific attack paths, test defense effectiveness, and tune alerting thresholds.
• Incident Response & Forensics Support: Collaborate with the IR team to author and refine AI-specific runbooks, investigation workflows, and digital forensics/evidence-gathering standards.
• Strategic Roadmapping & Executive Advisory: Conduct organizational readiness assessments, track emerging AI attack vectors, and present risk mitigation roadmaps and investment recommendations to technology leadership.

Required Skills:

• Security Operations, Detection Engineering & Threat Hunting: Deep background in SOC monitoring, detection engineering, SIEM/SOAR rule creation, alerting pipelines, and threat hunting workflows.
• AI & LLM Cybersecurity: Hands‑on experience securing Generative AI, Agentic AI, Large Language Models (LLMs), Model Context Protocol (MCP), and AI APIs-especially within AWS cloud environments.
• Framework Proficiency: Practical application of MITRE ATLAS , OWASP for LLM Applications , and NIST AI RMF for threat modeling and control mapping.
• Purple Teaming & Adversary Emulation: Experience designing and testing attack scenarios against AI workloads to validate defensive controls.
• Telemetry & Observability Strategy: Proven ability to architect logging, telemetry pipelines, and data visibility requirements for cloud and AI/ML workloads.
• Non-Human Identity & Access Management: Understanding of security best practices for AI service accounts, automated agents, API tokens, and machine-to-machine integrations.
• Cross-Functional Architecture & Stakeholder Leadership: Experience driving security architecture reviews, leading executive briefings, and translating complex AI risks into business decisions.

Education:

Education: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Engineering, or equivalent practical experience. Advanced degree preferred.

Preferred Certifications:

Security Architecture & Leadership: CISSP, CCSP, GIAC (e.g., GDSA, GCIA, GCIH), or AWS Certified Security Specialty. AI Security & Governance: Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM), CompTIA Security AI+, or equivalent specialized training. Cloud & AI Fundamentals: AWS Certified AI Practitioner, AWS Certified Cloud Practitioner. Work Style & Core Competencies Strong analytical mindset to parse complex telemetry and detect subtle, novel adversary techniques. Executive-level communication skills to present roadmaps, project health, and threat intelligence to Directors, VPs, and engineering peers. Collaborative and adaptable in fast-moving Agile environments with shifting enterprise priorities.