Sr AI Architect, Application Security- Remote (Anywhere in the U.S.)

guidepointsecurity; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

GuidePoint Security is seeking an AI Architect to support the Application Security Practice across architecting, building, and securing agentic workflows that support consultant delivery. You will lead AI strategy, security architecture, and training engagements, while representing the practice in AI labs and client environments.

As a builder, advisor, and technical liaison, you will own the technical direction of the internal AI platform, collaborate with AI labs, and embed in client

Qualifications

• Proven experience in AI/LLM engineering and security architecture.
• Experience leading security-focused AI projects.
• Ability to work with clients and AI labs during engagements.

Responsibilities

• Design the architecture, technical roadmap, and secure design of the Practice's agentic delivery platform.
• Build and maintain new agentic capabilities across the delivery portfolio.
• Apply secure-by-design principles to the Practice's AI systems and enforce least-privilege controls.
• Serve as a forward-deployed security architect on client engagements and embed with client teams.

Skills

AI Architecture

Security Architecture

LLM Engineering

Threat Modeling

Job description

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

General Description

We are looking for a skilled AI Architect to support the GuidePoint Security Application Security Practice across three areas: architecting, building, and securing the agentic workflows that support consultant delivery; serving as a technical lead for our work with AI labs and model providers; and leading client-facing AI strategy, AI security architecture, and AI training engagements, while providing "Wow Them" service to clients and/or internal customers or co-workers.

This is a builder, advisor, and technical liaison role. The AI Architect will be required to demonstrate strong AI/LLM engineering, agentic system design, and security architecture skills, and lead by influence across technical and business audiences. You will own the technical direction and secure design of the Practice's internal AI platform, represent GuidePoint Security in technical discussions with the AI labs we work with, and embed in client environments as a security architect and AI strategy lead as engagements require.

About the Application Security Practice

The Application Security Practice helps clients identify, understand, and remediate risk in the applications and AI systems they build and buy. We perform hands-on technical assessments, threat modeling, secure code reviews, and architecture reviews, and we build and mature application security programs and Secure SDLC capabilities across our clients' organizations.

Our team of application security consultants, secure code reviewers, and AI/LLM security specialists covers modern web, mobile, IoT, and thick client platforms as well as AI-native and agentic architectures, testing against standards such as the OWASP Top 10 and the OWASP Top 10 for LLM and Agentic Applications. We partner with client development, DevSecOps, data science, and security leadership teams to embed security throughout the development lifecycle.

We have invested heavily in agentic delivery: purpose-built agents, skills, and tool integrations that augment our consultants rather than replace them. Key areas of focus for this role include:

• Architecting and scaling the agentic delivery platform behind our architecture reviews, threat modeling, program reviews, code reviews, and penetration testing, and securing our own AI systems to the same standard we hold our clients to
• Building technical relationships with the AI labs so we can put new platform capabilities to work for clients quickly
• Advancing client AI strategy, AI governance, and secure AI adoption as enterprises move from AI experimentation to production

We work directly with AI labs on technical enablement and support our consultants through lab training and certification programs, including Anthropic's SME network and Claude certification track, so the team's expertise keeps pace with the platforms our clients deploy.

Roles and Responsibilities

• Help design the architecture, technical roadmap, and secure design of the Practice's agentic delivery platform, the agents, skills, prompts, tool integrations, MCP servers, and orchestration workflows that enable consultant delivery of application architecture reviews, threat modeling, application security program reviews, secure code reviews, and application security assessments.
• Design, build, and maintain new agentic capabilities across the delivery portfolio, including agent workflows, retrieval and context strategies, tool and data-source integrations, and evaluation harnesses that measure the accuracy, coverage, and consistency of agent output against expert-reviewed baselines.
• Apply secure-by-design principles to the Practice's own AI systems by threat modeling agent architectures, enforcing least-privilege tool scopes and autonomy boundaries, protecting client data across context windows and retrieval stores, governing model and provider selection, and implementing controls aligned to the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, the NIST AI Risk Management Framework, and MITRE ATLAS, while establishing the engineering standards and guardrails that govern AI-assisted delivery, including human-in-the-loop review gates, output validation, prompt and agent version control, change management, telemetry, and documented evidence of client-data handling sufficient to withstand client, contractual, and regulatory scrutiny.
• Serve as a forward-deployed security architect on client engagements, embedding with client engineering, platform, data science, and security teams to design, review, and