Some travel may be required (up to 20%). A profitable, privately held cybersecurity consultancy with a focus exclusively on information security is hiring a senior AI architect for its application security practice. The role blends hands-on engineering, client advisory, and lab partnership work across AI-native and agentic systems. The practice assesses and hardens the applications and AI systems that enterprises build and buy, and the architect will shape both its internal AI delivery platform and its client AI strategy.
Responsibilities
- Design the architecture and secure design of an internal agentic delivery platform used for architecture reviews, threat modeling, code reviews, and penetration testing.
- Build agent workflows, retrieval and context strategies, tool integrations, and evaluation harnesses that measure output accuracy and consistency against expert-reviewed baselines.
- Threat model the practice's own AI systems and implement controls aligned to the OWASP LLM and Agentic application Top 10s, the NIST AI RMF, and MITRE ATLAS, including least-privilege tool scopes and human-in-the-loop gates.
- Serve as a forward-deployed security architect embedded with client engineering and security teams, and lead client AI strategy, AI governance, and AI security architecture engagements.
- Develop AI security training for clients and internal consultants, and act as the primary technical contact with AI model providers.
Requirements
- Bachelor's degree plus 3 years of relevant experience, or a Master's degree; a high school diploma with 7 years of experience is also accepted.
- At least 3 years in security architecture, application security, software engineering, or platform engineering with ownership of system-level design decisions.
- At least 1 year in an enterprise consulting or client-facing technical advisory role.
- Hands-on experience designing and shipping AI agents and agentic systems, including orchestration, tool calling, MCP servers, retrieval-augmented generation, and evaluation harnesses. Able to walk through specific systems built, their security tradeoffs, and where they failed.
- Strong Python or TypeScript/JavaScript skills and experience building against LLM APIs and SDKs.
- Ability to communicate architecture and AI strategy to both engineering teams and executives.
Applicants must be based in: United States.