Sr Manager AI & Security Architect- US

DXC Technology Company; Richmond (VA); Hybrid; USD 144,000 - 267,000; Full time

Job summary

DXC Technology is seeking an experienced security architect focused on AI/ML security to design secure AI/ML ecosystems, perform threat modeling, and guide governance across enterprise platforms. The role emphasizes secure-by-design architecture, risk assessment, and collaboration with cross‑functional teams in a US-based setting.

The position requires deep knowledge of MITRE ATLAS, OWASP Top 10 for LLMs, and NIST AI RMF, with hands-on experience in securing AI‑assisted software development.

Qualifications

• 8+ years of experience in information security or enterprise architecture, with recent focus on AI/ML or Generative AI security.
• Must be authorized to work in the US without requiring sponsorship now nor in the future
• Proven experience performing secure architecture assessments, design reviews, and threat models for complex, integrated systems.
• Broad experience across cloud platforms (AWS), identity, key management, secrets management, networking, containers, and API security.
• Deep knowledge of Agentic AI, autonomous agents, threat modeling, and security frameworks (MITRE ATLAS, OWASP LLM Top 10, NIST AI RMF) for ML and AI systems
• Experience securing AI‑assisted software development and agentic systems, including AI coding assistants, agent frameworks, tool/MCP integrations, and the controls needed for safe enterprise use of AI in building applications and agents.
• Expertise in interpreting and applying internal security policies, standards, and controls.
• Strong communication skills with the ability to convey complex technical concepts to technical and non technical audiences, including senior leadership.
• Demonstrated ability to drive decisions, collaborate across teams, and balance risk vs. business needs.
• Hands‑on experience preparing technical diagrams and threat models.

Responsibilities

• Security Architecture & Solution Design: Develop secure design patterns and controls for AI/ML solutions.
• Security Architecture & Solution Design: Define secure operating environment and ensure alignment with enterprise architecture strategy and GIS standards.
• Security Architecture & Solution Design: Evaluate system impacts, data flows, integration points, and non‑functional requirements such as security.
• Security Architecture & Solution Design: Provide solution options to resolve architectural constraints and remove design impediments.
• Security Architecture & Solution Design: Participate in design reviews, feature decomposition, and technical governance for AI-enabled platforms and SDLC-integrated developer tools (e.g., GitHub Copilot, Microsoft Copilot Studio).
• AI/ML Security, Threat Modeling & Risk Assessments: Conduct AI‑specific risk assessments using frameworks including MITRE ATLAS, OWASP Top 10 for LLMs/GenAI, and NIST AI RMF.
• AI/ML Security, Threat Modeling & Risk Assessments: Perform detailed threat modeling (STRIDE or equivalent) for cloud, application, data, and AI use cases.
• AI/ML Security, Threat Modeling & Risk Assessments: Identify risks such as prompt injection, model/data poisoning, data leakage, model theft, hallucinations, and supply chain risk across model, dataset, and embedding ecosystems.
• AI/ML Security, Threat Modeling & Risk Assessments: Define compensating controls and architectural safeguards for AI/ML pipelines, including input/output filtering, retrieval restrictions, data minimization, privacy controls, and identity boundaries.
• Collaboration & Governance: Work across lines of business, operations, enterprise architecture, data science, and development teams to ensure clear solution intent and secure‑by‑design outcomes.
• Collaboration & Governance: Translate policy and standards into actionable architecture guidance for delivery teams.
• Collaboration & Governance: Educate partners on architectural best practices, security control requirements, and evolving AI threat landscapes.
• Collaboration & Governance: Support technology stack evaluations and selection of secure tools, platforms, and third‑party integrations.
• Collaboration & Governance: Provide architecture review documentation, data flow diagrams, and risk summaries to support governance processes.

Skills

AI/ML security

Threat modeling

Security architecture

Cloud security

Communication

Leadership

Policy understanding

Tools

GitHub Copilot

Microsoft Copilot Studio

Job description

About DXC Technology

DXC Technology is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates.

Job Description

DXC Technology is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates.

Our DXC Security services helps customers assess risk and proactively address all facets of their security environment, from threat intelligence to compliance. We leverage proven methodologies, intelligent automation and industry‑leading partners to tailor security solutions to our customers' unique business needs.

Responsibilities

Security Architecture & Solution Design

• Develop and maintain secure design patterns and controls for AI/ML solutions, including LLMs, RAG architectures, vector databases, and enterprise AI agents.
• Define secure operating environment and ensure alignment with enterprise architecture strategy and GIS standards.
• Evaluate system impacts, data flows, integration points, and non‑functional requirements such as security.
• Provide solution options to resolve architectural constraints and remove design impediments.
• Participate in design reviews, feature decomposition, and technical governance for AI-enabled platforms and SDLC-integrated developer tools (e.g., GitHub Copilot, Microsoft Copilot Studio).

AI/ML Security, Threat Modeling & Risk Assessments

• Conduct AI‑specific risk assessments using frameworks including MITRE ATLAS, OWASP Top 10 for LLMs/GenAI, and NIST AI RMF.
• Perform detailed threat modeling (STRIDE or equivalent) for cloud, application, data, and AI use cases.
• Identify risks such as prompt injection, model/data poisoning, data leakage, model theft, hallucinations, and supply chain risk across model, dataset, and embedding ecosystems.
• Define compensating controls and architectural safeguards for AI/ML pipelines, including input/output filtering, retrieval restrictions, data minimization, privacy controls, and identity boundaries.

Collaboration & Governance

• Work across lines of business, operations, enterprise architecture, data science, and development teams to ensure clear solution intent and secure‑by‑design outcomes.
• Translate policy and standards into actionable architecture guidance for delivery teams.
• Educate partners on architectural best practices, security control requirements, and evolving AI threat landscapes.
• Support technology stack evaluations and selection of secure tools, platforms, and third‑party integrations.
• Provide architecture review documentation, data flow diagrams, and risk summaries to support governance processes.

Required Qualifications

• 8+ years of experience in information security or enterprise architecture, with recent focus on AI/ML or Generative AI security.
• Must be authorized to work in the US without requiring sponsorship now nor in the future
• Proven experience performing secure architecture assessments, design reviews, and threat models for complex, integrated systems.
• Broad experience across cloud platforms (AWS), identity, key management, secrets management, networking, containers, and API security.
• Deep knowledge of Agentic AI, autonomous agents, threat modeling, and security frameworks (MITRE ATLAS, OWASP LLM Top 10, NIST AI RMF) for ML and AI systems
• Experience securing AI‑assisted software development and agentic systems, including AI coding assistants, agent frameworks, tool/MCP integrations, and the controls needed for safe enterprise use of AI in building applications and agents.
• Expertise in interpreting and applying internal security policies, standards, and controls.
• Strong communication skills with the ability to convey complex technical concepts to technical and non technical audiences, including senior leadership.
• Demonstrated ability to drive decisions, collaborate across teams, and balance risk vs. business needs.
• Hands‑on experience preparing technical diagrams and threat models.

Desired Qualifications

• Experience with advanced developer tools such as GitHub Copilot, Microsoft Copilot Studio, or similar AI coding assistants.
• Certifications such as CISSP, CISM, CCSP, CCSK, CRISC, or cloud architecture/security certifications.
• Familiarity with agile methodologies, DevOps practices, CI/CD pipelines, and developer experience platforms.
• Experience in financial services or other regulated industries.

Compensation at DXC is influenced by an array of factors, including but not limited to the experience, job-related knowledge, skills, competencies, as well as contract‑specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $143,900 - $267,200.

Full‑time hires are eligible to participate in the DXC benefit program. DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in‑person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

If you are an applicant from the United States, Guam, or Puerto Rico

DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below.

We participate in E‑Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below.

Disability Accommodations

If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.

Please note: DXC will respond only to requests for accommodations due to a disability.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.