Security Architect

Maganti IT Resources, LLC; Dallas (TX); On-site; USD 180,000 - 260,000; Full time

Job summary

Maganti IT Resources, LLC seeks a Security Architect to lead AI cybersecurity threat monitoring across GenAI, MCP, and AI APIs. You will integrate threat modeling, detection engineering, and incident response into SOC, IR, and threat hunting workflows.

The role requires hands-on capability with MITRE ATLAS, NIST AI RMF, and OWASP Top 10 for LLM Applications, guiding architecture roadmaps and cross-functional collaboration.

Qualifications

• :

Responsibilities

• AI Threat Modeling & Attack Scenarios: Define and pilot an AI Threat Modeling capability; build a comprehensive library of AI attack scenarios mapped to the MITRE ATLAS framework to support Purple Teaming and Adversary Emulation.
• Detection Engineering & SIEM/SOAR: Design, build, test, and tune high-fidelity AI detection rules, correlation logic, and automated response playbooks within enterprise SIEM/SOAR platforms.
• AI Threat Hunting: Build proactive, AI-focused threat hunting playbooks and execute targeted hunts across enterprise GenAI platforms, cloud environments, and AI APIs.
• Telemetry & Logging Architecture: Define telemetry, logging, and observability requirements across AI systems and lead gap analyses to expand SOC visibility.
• Adversary Emulation & Purple Teaming: Partner with Threat Informed Defense and Purple Teams to validate AI-specific attack paths and tune alerting thresholds.
• Incident Response & Forensics Support: Collaborate with IR team to author runbooks and forensics workflows.
• Strategic Roadmapping & Executive Advisory: Conduct organizational readiness assessments and present risk mitigation roadmaps to leadership.

Skills

SOC Monitoring

Threat Hunting

AI/LLM Security

Threat Modeling

Detection Engineering

SIEM/SOAR

Adversary Emulation

Education

Bachelor's degree in Cybersecurity/CS/IS/Data Science/Engineering

Advanced degree preferred

Certifications: CISSP/CCSP/GIAC/AWS Security Specialty

AI Security Certifications (AAIR/AAISM)

Job description

Job Role: Architect - AI Cybersecurity Threat Monitoring Position Overview We are seeking a Security Architect specializing in AI Cybersecurity Threat Monitoring to establish and operationalize threat response capabilities targeting and leveraging AI systems. This role focuses on identifying, detecting, investigating, hunting, and responding to emerging threats across enterprise GenAI, agentic AI, foundation models, data sources, non-human identities, Model Context Protocol (MCP), and tool integrations. Rather than siloing AI security, the Architect will integrate AI threat response, threat modeling, and detection engineering into existing SOC, IR, and Threat Hunting workflows using industry frameworks such as MITRE ATLAS, NIST AI RMF, and OWASP Top 10 for LLM Applications. This individual must move seamlessly between threat research, architecture roadmapping, and hands‑on detection engineering.

Key Responsibilities

• AI Threat Modeling & Attack Scenarios: Define and pilot an AI Threat Modeling capability; build a comprehensive library of AI attack scenarios mapped to the MITRE ATLAS framework to support Purple Teaming and Adversary Emulation.
• Detection Engineering & SIEM/SOAR: Design, build, test, and tune high‑fidelity AI detection rules, correlation logic, and automated response playbooks within enterprise SIEM/SOAR platforms.
• AI Threat Hunting: Build proactive, AI‑focused threat hunting playbooks and execute targeted hunts across enterprise GenAI platforms, cloud environments, and AI APIs.
• Telemetry & Logging Architecture: Define telemetry, logging, and observability requirements across AI systems (e.g., token usage, prompt/response telemetry, MCP integrations) and lead gap analyses to expand SOC visibility.
• Adversary Emulation & Purple Teaming: Partner with Threat Informed Defense and Purple Teams to validate AI‑specific attack paths, test defense effectiveness, and tune alerting thresholds.
• Incident Response & Forensics Support: Collaborate with the IR team to author and refine AI‑specific runbooks, investigation workflows, and digital forensics/evidence gathering standards.
• Strategic Roadmapping & Executive Advisory: Conduct organizational readiness assessments, track emerging AI attack vectors, and present risk mitigation roadmaps and investment recommendations to technology leadership.

Required Skills & Experience (Ranked by Importance)

1. 1. Security Operations, Detection Engineering & Threat Hunting: Deep background in SOC monitoring, detection engineering, SIEM/SOAR rule creation, alerting pipelines, and threat hunting workflows.
2. 2. AI & LLM Cybersecurity: Hands‑on experience securing Generative AI, Agentic AI, Large Language Models (LLMs), Model Context Protocol (MCP), and AI APIs - especially within AWS cloud environments.
3. 3. Framework Proficiency: Practical application of MITRE ATLAS, OWASP for LLM Applications, and NIST AI RMF for threat modeling and control mapping.
4. 4. Purple Teaming & Adversary Emulation: Experience designing and testing attack scenarios against AI workloads to validate defensive controls.
5. 5. Telemetry & Observability Strategy: Proven ability to architect logging, telemetry pipelines, and data visibility requirements for cloud and AI/ML workloads.
6. 6. Non‑Human Identity & Access Management: Understanding of security best practices for AI service accounts, automated agents, API tokens, and machine‑to‑machine integrations.
7. 7. Cross‑Functional Architecture & Stakeholder Leadership: Experience driving security architecture reviews, leading executive briefings, and translating complex AI risks into business decisions.

Qualifications & Education

• Education: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Engineering, or equivalent practical experience. Advanced degree preferred.
• Basic Requirements: Must be at least 18 years old and legally authorized to work in the United States without sponsorship (Immigration Reform Act of 1986).

Preferred Certifications

• Security Architecture & Leadership: CISSP, CCSP, GIAC (e.g., GDSA, GCIA, GCIH), or AWS Certified Security - Specialty.
• AI Security & Governance: Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM), CompTIA Security AI+, or equivalent specialized training.
• Cloud & AI Fundamentals: AWS Certified AI Practitioner, AWS Certified Cloud Practitioner.

Work Style & Core Competencies

• Strong analytical mindset to parse complex telemetry and detect subtle, novel adversary techniques.
• Executive‑level communication skills to present roadmaps, project health, and threat intelligence to Directors, VPs, and engineering peers.
• Collaborative and adaptable in fast‑moving Agile environments with shifting enterprise priorities.