GenAI Security Platform Architect

Join to apply for the GenAI Security Platform Architect role at Liberty Mutual Insurance
.

This range is provided by Liberty Mutual Insurance. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

$/yr - $/yr

We deliver our customers peace of mind every day by helping them protect what they value most. Our passion for placing the customer at the center of everything we do is driving a transformational shift at Liberty Mutual. Operating as a tech startup within a Fortune 100 company, we are leading a digital disruption that will redefine how people experience insurance.

At Liberty, you'll thrive in a hybrid setting that fosters in-person collaboration, innovation and growth. This approach optimizes both remote and in-person interactions, enabling you to connect and ideate with your team and deepen valuable relationships across the company, while still enjoying the flexibility of remote work for focused tasks and projects.

This role has a hybrid work schedule (2 days onsite) for candidates based in Portsmouth, NH, Boston, MA, Plano, TX, Indianapolis, IN and Columbus, OH.

Job Introduction

The Security Architecture & Innovation team within the Global Cybersecurity (GCS) organization is seeking a seasoned GenAI Security Platform Architect with expertise in securing AI/ML systems and GenAI applications. The candidate will define and drive the security architecture, controls, and governance for our AI platforms, models, and AI-enabled products. This role partners closely with Data Science, Enterprise Data & Analytics Technology, MLOps, Platform/Cloud, Legal/Privacy, and Global Cybersecurity Governance Risk and Compliance to design secure-by-design AI solutions that are resilient to adversarial threats and meet evolving regulatory requirements.

About The Job

• Architecture and strategy.
• Define and own the end-to-end security architecture for AI/ML systems (training, fine-tuning, inference/serving, RAG, agents, and integrations).
• Develop and maintain reference architectures and guardrails for common AI patterns (e.g., RAG with vector databases, multi-agent workflows/orchestration, LLM API integrations, on-prem vs. cloud model hosting).
• Build and maintain an AI security controls library mapped to frameworks (e.g. NIST AI RMF, OWASP Top 10 for LLM Apps, MITRE ATLAS).
• Risk management.
• Establish risk appetite and control requirements across the AI lifecycle; perform design reviews and signoffs for AI initiatives.
• Define security baselines, secure configurations, and kill-switch/rollback strategies for AI components.
• Continuously assess threat landscape and update risk models specific to AI/ML, GenAI, and insurance sector adversaries.
• Secure AI development and MLOps.
• Integrate security into the ML/LLM SDLC and CI/CD pipelines (dataset curation, feature engineering, model training, evaluation, packaging, registry, deployment).
• Partner across Global Cybersecurity, Global Digital Solutions (Cloud/Platforms/Infrastructure/Endpoint), and Liberty IT to enforce least privilege, secrets management, and policy‑as‑code for AI pipelines and serving infrastructure.
• Champion Dev Sec Ops  automation for AI projects by embedding security controls and testing directly into development pipelines, reducing reliance on manual approvals and enabling teams to deliver secure AI solutions quickly and efficiently.
• Adversarial robustness and safety.
• Recommend/consult on adversarial testing and red teaming for AI systems; coordinate jailbreak/prompt‑injection testing, model evasion scenarios, and safety evaluations.
• Recommend and validate defenses (input/output filtering, content moderation, prompt hardening, retrieval sanitization, adversarial training, rate limiting/abuse detection).
• Drive monitoring for model drift, anomaly detection, and harmful output prevention; set response strategies and develop response playbooks for AI incidents.
• Data protection and privacy.
• Ensure data minimization, classification, encryption, and access controls for training and inference data (incl. embeddings and vector stores).
• Ensure compliance with global…