Senior AI Security & Vulnerability Architect

Archer; San Jose (CA); Hybrid; USD 183,000 - 241,000; Full time

Job summary

Archer in San Jose, CA is seeking a Sr. Staff Vulnerability & AI Security Engineer to architect and lead Archer’s enterprise vulnerability management and AI security program. Reporting to the CISO, you will own the end-to-end vulnerability lifecycle across cloud, endpoints, and applications.

This role blends strategy and hands-on engineering to reduce risk through automation, secure guardrails for GenAI, and compliance with NIST SP 800-171, CMMC Level 2, and ITAR.

Qualifications

• 8+ years of security engineering experience with vulnerability management, AppSec, or cloud security.
• Staff-level influence leading enterprise security programs.
• Hands-on AWS, GCP, or Azure; identity, configuration and telemetry.
• Expertise with SAST/DAST/SCA and automated workflows.
• Understanding of NIST SP 800-171, CMMC, ITAR compliance.
• Ability to translate CVEs into business risk for non-technical stakeholders.

Responsibilities

• Architect end-to-end vulnerability management strategy and reporting.
• Develop risk-based prioritization integrating asset criticality and threat intel.
• Lead AI security governance and guardrails for GenAI usage.
• Integrate CNAPP/CSPM findings with automated workflows to reduce exposure.
• Embed SAST/DAST/SCA and secrets scanning into CI/CD pipelines.
• Define technical KPIs and drive remediation with leadership.
• Lead high-severity vulnerability response and validation.
• Mentor engineers and drive cross-functional remediation initiatives.

Skills

Vulnerability management

AI security

Cloud security

Security engineering

Communications

Tools

SAST/DAST/SCA

Cloud telemetry

Job description

Archer in San Jose, CA is seeking a Sr. Staff Vulnerability & AI Security Engineer to architect and lead Archer’s enterprise vulnerability management and AI security program. Reporting to the CISO, you will own the end-to-end vulnerability lifecycle across cloud, endpoints, and applications.

This role blends strategy and hands-on engineering to reduce risk through automation, secure guardrails for GenAI, and compliance with NIST SP 800-171, CMMC Level 2, and ITAR.