Senior Manager Information Security

USA7 DXC Technology Services LLC; Virginia; Ibrido; USD 144.000 - 267.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health, dental, and vision insurance

Retirement savings plan

Paid holidays

Paid time off

Descrizione del lavoro

DXC Technology Company seeks a Security Architect to design secure AI/ML platforms in the US. You will develop secure patterns for AI/ML, LLMs, RAG architectures, and enterprise AI agents in line with GIS standards and enterprise architecture.

Lead AI-specific risk assessments, threat modeling, and compensating controls across model, data, and deployment pipelines to prevent prompt injection and data leakage.

Competenze

• 8+ years of information security or enterprise architecture experience with AI/ML security.
• Authorized to work in the US without sponsorship now or in the future.
• Experience with secure architecture assessments, design reviews, threat models for complex systems.

Mansioni

• Develop and maintain secure design patterns for AI/ML solutions, including LLMs and AI agents.
• Perform AI-specific risk assessments using MITRE ATLAS, OWASP Top 10 for LLMs, and NIST AI RMF.
• Provide architecture review documentation, data flow diagrams, and risk summaries for governance.

Descrizione del lavoro

Job Description: About DXC Technology DXC Technology is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations - helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates. Our DXC Security services helps customers assess risk and proactively address all facets of their security environment, from threat intelligence to compliance. We leverage proven methodologies, intelligent automation and industry-leading partners to tailor security solutions to our customers' unique business needs.

Responsibilities

Security Architecture & Solution Design Develop and maintain secure design patterns and controls for AI/ML solutions, including LLMs, RAG architectures, vector databases, and enterprise AI agents. Define secure operating environment and ensure alignment with enterprise architecture strategy and GIS standards. Evaluate system impacts, data flows, integration points, and non-functional requirements such as security. Provide solution options to resolve architectural constraints and remove design impediments. Participate in design reviews, feature decomposition, and technical governance for AI-enabled platforms and SDLC-integrated developer tools (e.g., GitHub Copilot, Microsoft Copilot Studio).

AI/ML Security, Threat Modeling & Risk Assessments Conduct AI-specific risk assessments using frameworks including MITRE ATLAS, OWASP Top 10 for LLMs/GenAI, and NIST AI RMF. Perform detailed threat modeling (STRIDE or equivalent) for cloud, application, data, and AI use cases. Identify risks such as prompt injection, model/data poisoning, data leakage, model theft, hallucinations, and supply chain risk across model, dataset, and embedding ecosystems. Define compensating controls and architectural safeguards for AI/ML pipelines, including input/output filtering, retrieval restrictions, data minimization, privacy controls, and identity boundaries.

Collaboration & Governance Work across lines of business, operations, enterprise architecture, data science, and development teams to ensure clear solution intent and secure-by-design outcomes. Translate policy and standards into actionable architecture guidance for delivery teams. Educate partners on architectural best practices, security control requirements, and evolving AI threat landscapes. Support technology stack evaluations and selection of secure tools, platforms, and third‑party integrations. Provide architecture review documentation, data flow diagrams, and risk summaries to support governance processes.

Required Qualifications

• 8+ years of experience in information security or enterprise architecture, with recent focus on AI/ML or Generative AI security.
• Must be authorized to work in the US without requiring sponsorship now nor in the future.
• Proven experience performing secure architecture assessments, design reviews, and threat models for complex, integrated systems.
• Broad experience across cloud platforms (AWS), identity, key management, secrets management, networking, containers, and API security.
• Deep knowledge of Agentic AI, autonomous agents, threat modeling, and security frameworks (MITRE ATLAS, OWASP LLM Top 10, NIST AI RMF) for ML and AI systems.
• Experience securing AI-assisted software development and agentic systems, including AI coding assistants, agent frameworks, tool/MCP integrations, and the controls needed for safe enterprise use of AI in building applications and agents.
• Expertise in interpreting and applying internal security policies, standards, and controls.
• Strong communication skills with the ability to convey complex technical concepts to technical and non technical audiences, including senior leadership.
• Demonstrated ability to drive decisions, collaborate across teams, and balance risk vs. business needs.
• Hands‑on experience preparing technical diagrams and threat models.

Desired Qualifications

• Experience with advanced developer tools such as GitHub Copilot, Microsoft Copilot Studio, or similar AI coding assistants.
• Certifications such as CISSP, CISM, CCSP, CCSK, CRISC, or cloud architecture/security certifications.
• Familiarity with agile methodologies, DevOps practices, CI/CD pipelines, and developer experience platforms.
• Experience in financial services or other regulated industries.

Compensation and Benefits

Compensation at DXC is influenced by an array of factors, including but not limited to the experience, job-related knowledge, skills, competencies, as well as contract-specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $143,900 - $267,200. Full-time hires are eligible to participate in the DXC benefit program.

DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.

• health, dental, and vision insurance coverage
• employee wellness
• life and disability insurance
• a retirement savings plan, paid holidays, paid time off

Equal Opportunity

At DXC Technology, we believe strong connections and community are key to our success.

Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances.

We’re committed to fostering an inclusive environment where everyone can thrive.

If you are an applicant from the United States, Guam, or Puerto Rico DXC Technology Company (DXC) is an Equal Opportunity employer.

All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law.

We participate in E-Verify.

Disability Accommodations

If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.