Security Architect

Intone Networks Inc.; Dallas, Northern (TX, KY); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Intone Networks Inc. is seeking an experienced architect to build and operationalize AI cybersecurity threat monitoring for a 6-month hybrid role in Dallas. You will integrate AI security into SOC, IR, and threat hunting workflows using MITRE ATLAS, NIST AI RMF, and OWASP Top 10 for LLM Applications.

You will define telemetries, craft detection rules, and runbooks, and lead risk discussions with technology leadership while collaborating with Purple Teams and the broader security program.

Qualifications

• Deep background in SOC monitoring, detection engineering, SIEM/SOAR rule creation, alerting pipelines, and threat hunting workflows.
• Hands-on experience securing Generative AI, Agentic AI, LLMs, MCP, and AI APIs - especially within AWS cloud environments.
• Practical application of MITRE ATLAS, OWASP for LLM Applications, and NIST AI RMF for threat modeling and control mapping.
• Experience designing and testing attack scenarios against AI workloads to validate defensive controls.
• Proven ability to architect logging, telemetry pipelines, and data visibility requirements for cloud and AI/ML workloads.
• Understanding security best practices for AI service accounts, automated agents, API tokens, and machine-to-machine integrations.
• Experience driving security architecture reviews, leading executive briefings, and translating complex AI risks into business decisions.

Responsibilities

• Define and pilot an AI Threat Modeling capability; build a library of AI attack scenarios mapped to MITRE ATLAS for Purple Teaming.
• Design, build, test, and tune high-fidelity AI detection rules, correlation logic, and automated response playbooks within SIEM/SOAR platforms.
• Build AI-focused threat hunting playbooks and run targeted hunts across GenAI platforms, cloud environments, and AI APIs.
• Define telemetry, logging, and observability requirements across AI systems; lead gap analyses to expand SOC visibility.
• Partner with Threat Informed Defense and Purple Teams to validate AI attack paths and tune alerting thresholds.
• Collaborate with IR to author AI-specific runbooks, investigation workflows, and digital forensics standards.
• Conduct organizational readiness assessments, track AI attack vectors, and present risk mitigation roadmaps to leadership.

Skills

SOC monitoring

Detection engineering

SIEM/SOAR

Threat hunting

AI security

AWS security

MITRE ATLAS

NIST AI RMF

Threat modeling

Executive briefings

Education

Bachelor's degree in Cybersecurity, CS, IS, Data Science, Engineering, or equivalent

Advanced degree preferred

Tools

SIEM/SOAR platforms

AWS cloud security tools

Threat modeling tools

MITRE ATLAS mapping tools

Forensic tooling

Job description

This is a 6-month contract role based in Dallas, Texas, offering the opportunity to architect and operationalize AI cybersecurity threat monitoring capabilities. Working in a hybrid capacity (2-3 days on-site with travel as needed), you will establish threat response functions that integrate AI security into existing SOC, IR, and threat hunting workflows, using industry frameworks such as MITRE ATLAS, NIST AI RMF, and OWASP Top 10 for LLM Applications.

Responsibilities

• Define and pilot an AI Threat Modeling capability; build a comprehensive library of AI attack scenarios mapped to the MITRE ATLAS framework to support Purple Teaming and Adversary Emulation.
• Design, build, test, and tune high-fidelity AI detection rules, correlation logic, and automated response playbooks within enterprise SIEM/SOAR platforms.
• Build proactive, AI-focused threat hunting playbooks and execute targeted hunts across enterprise GenAI platforms, cloud environments, and AI APIs.
• Define telemetry, logging, and observability requirements across AI systems (including token usage, prompt/response telemetry, and MCP integrations); lead gap analyses to expand SOC visibility.
• Partner with Threat Informed Defense and Purple Teams to validate AI-specific attack paths, test defense effectiveness, and tune alerting thresholds.
• Collaborate with the IR team to author and refine AI-specific runbooks, investigation workflows, and digital forensics/evidence-gathering standards.
• Conduct organizational readiness assessments, track emerging AI attack vectors, and present risk mitigation roadmaps and investment recommendations to technology leadership.

Qualifications

• Required
  • Deep background in SOC monitoring, detection engineering, SIEM/SOAR rule creation, alerting pipelines, and threat hunting workflows.
  • Hands-on experience securing Generative AI, Agentic AI, Large Language Models (LLMs), Model Context Protocol (MCP), and AI APIs - especially within AWS cloud environments.
  • Practical application of MITRE ATLAS, OWASP for LLM Applications, and NIST AI RMF for threat modeling and control mapping.
  • Experience designing and testing attack scenarios against AI workloads to validate defensive controls.
  • Proven ability to architect logging, telemetry pipelines, and data visibility requirements for cloud and AI/ML workloads.
  • Understanding of security best practices for AI service accounts, automated agents, API tokens, and machine-to-machine integrations.
  • Experience driving security architecture reviews, leading executive briefings, and translating complex AI risks into business decisions.
  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Engineering, or equivalent practical experience.
• Preferred
  • Advanced degree in a related field.
  • CISSP, CCSP, GIAC (e.g., GDSA, GCIA, GCIH), or AWS Certified Security - Specialty.
  • Advanced in AI Risk (AAIR), Advanced in AI Security Management (AAISM), CompTIA Security AI+, or equivalent specialized training.
  • AWS Certified AI Practitioner or AWS Certified Cloud Practitioner.

Core Competencies

• Strong analytical mindset to parse complex telemetry and detect subtle, novel adversary techniques.
• Executive-level communication skills to present roadmaps, project health, and threat intelligence to directors, vice presidents, and engineering peers.
• Collaborative and adaptable approach in fast-moving Agile environments with shifting enterprise priorities.