AI Security Architect – Application Security, Zero Trust & AI Governance

AI Security Solution Architect – Application Security, Zero Trust & AI Governance

• Lead the end-to-end design and governance of an AI-driven vulnerability detection and remediation platform.
• Ensure Zero Trust architecture, regulatory compliance, auditability, and secure SDLC integration.

• Application Security (App Sec) including:
  • SAST
  • SCA
  • DAST
  • API Security
  • Identity and Access Management (IAM)
• Strong experience with:
  • Checkmarx
  • Snyk
  • Fortify

• Zero Trust Architecture (NIST 800-207)
• Cloud security experience with GCP and Azure

• Prompt injection protection
• Model abuse prevention
• LLM risk management

• Experience with CI/CD platforms, including:
  • Git Hub
  • Jenkins
  • Git Lab

• Define agent orchestration strategy using multi-agent architecture and judge models.
• Establish guardrails for AI-driven decisions and suppression workflows.
• Lead Retrieval-Augmented Generation (RAG)-based knowledge integration for secure coding.

• Define the AI-driven Application Security reference architecture integrating Checkmarx, CI/CD pipelines, and Agentic AI.
• Lead Zero Trust Architecture (ZTA) design, including:
  • API Security
  • Identity Management
  • Role-Based Access Control (RBAC)
  • Attribute-Based Access Control (ABAC)
• Define secure SDLC and Dev Sec Ops  frameworks.

• Drive LLM-based vulnerability detection and remediation governance.
• Oversee multi-agent decision governance, including LLM judge models and consensus controls.
• Conduct AI/ML security risk reviews covering:
  • Model integrity
  • Prompt injection
  • Data leakage
• Define policies for automated remediation and escalation thresholds.

• Lead risk assessments and compliance mapping for:
  • PCI-DSS
  • SOX
  • OSFI
  • NIST
• Ensure auditability through:
  • Trace IDs
  • Evidence logs
  • SIEM integration