Staff AI Product Security Architect

GitLab; United States; Remote; USD 130,000 - 180,000; Full time

Benefits offered by this job

Equal opportunity workplace

Flexible work environment

Job summary

A leading software company is hiring a Staff AI Product Security Architect to enhance the security of their AI-powered platform. This senior position involves establishing secure principles for AI integrations and conducting risk assessments. Candidates should have over 8 years of relevant experience, especially in securing AI systems. The role promotes mentorship within a collaborative environment and ensures compliance with regulatory requirements.

Qualifications

• 8+ years of experience in security architecture or application security, specifically in AI/ML systems.
• Deep understanding of AI system architectures and security vulnerabilities.
• Proven expertise in threat modeling and security architecture.

Responsibilities

• Design and implement security architectures for AI integrations.
• Establish secure-by-design principles for AI systems.
• Conduct comprehensive threat modeling and risk assessments.

Skills

Threat modeling

Security architecture for AI systems

Communication skills

DevSecOps methodologies

Tools

Python

AI frameworks

Job description

GitLab is an open-core software company that develops the most comprehensive AI-powered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world.

We are seeking a Staff AI Product Security Architect to join our Security Platforms & Architecture Team with a specialized focus on securing GitLab's AI-powered DevSecOps capabilities, including GitLab Duo Agent Platform, GitLab Duo Chat, and multi-agent collaboration systems.

About The Role

This is a senior technical leadership position where you'll shape how GitLab approaches AI security across our entire platform. You'll be responsible for establishing secure-by-design principles for AI integrations, creating architectural patterns that engineering teams can leverage, and ensuring our AI capabilities meet enterprise security requirements.

Responsibilities

• Design and implement security architectures for AI integrations, including agent security, prompt injection prevention, and workflow validation
• Establish secure-by-design principles and patterns for AI systems that enable engineering teams to build secure capabilities efficiently
• Conduct comprehensive threat modeling and risk assessments for AI features and multi-agent orchestration platforms
• Develop security standards for AI model integration, data handling, and agent communication protocols
• Provide expert consultation to engineering teams on AI security architecture decisions and trade-offs
• Create architectural documentation and reference implementations that accelerate secure AI development
• Stay current with AI security threats, vulnerabilities, and industry best practices to inform architectural decisions
• Collaborate with Security Research to translate vulnerability findings into architectural improvements
• Partner with Product and Engineering leadership to balance security requirements with product velocity
• Mentor engineers and security team members on AI security architecture principles
• Work with legal and compliance teams to ensure AI systems meet regulatory requirements including EU AI Act, NIST AI RMF, and data privacy regulations

Requirements

• 8+ years of experience in security architecture or application security, with significant experience securing AI/ML systems
• Deep understanding of AI system architectures and security vulnerabilities
• Proven expertise in threat modeling and security architecture for complex distributed systems
• Experience designing security controls for distributed applications and automated workflows
• Track record of developing security standards adopted across engineering organizations
• Strong knowledge of secure software development lifecycle practices and DevSecOps methodologies
• Ability to communicate complex security concepts to diverse technical and non-technical audiences
• Experience with AI frameworks, agent architectures, and orchestration platforms
• Demonstrated ability to balance security requirements with business objectives

Nice To Have Qualifications

• Experience with AI workflow validation, agent testing, and monitoring approaches
• Knowledge of AI regulatory compliance and governance frameworks
• Programming skills in Python with hands-on experience in AI frameworks
• Security certifications such as CISSP, CCSP, or similar
• Experience with GitLab or similar DevSecOps platforms
• Background in software engineering with expertise in distributed systems
• Published work or presentations on AI security architecture

GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex, national origin, age, citizenship, marital status, mental or physical disability, genetic information, discharge status from the military, protected veteran status, or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.