AI Security Architect – Application Security, Zero Trust & AI Governance

AI Security Solution Architect – Application Security, Zero Trust & AI Governance
Role Summary

• Lead the end-to-end design and governance of an AI-driven vulnerability detection and remediation platform.

• Ensure Zero Trust architecture, regulatory compliance, auditability, and secure SDLC integration.

• Application Security (App Sec) including:

• SAST

• SCA

• DAST

• API Security

• Identity and Access Management (IAM)

• Strong experience with:

• Checkmarx

• Snyk

• Fortify

• Zero Trust Architecture (NIST 800-207).

• Cloud security experience with GCP and Azure.

• AI security, including:

• Prompt injection protection

• Model abuse prevention

• LLM risk management

• Experience with CI/CD platforms, including:

• Git Hub

• Jenkins

• Git Lab

• Define agent orchestration strategy using multi-agent architecture and judge models.

• Establish guardrails for AI-driven decisions and suppression workflows.

• Lead Retrieval-Augmented Generation (RAG)-based knowledge integration for secure coding.

• Define the AI-driven Application Security reference architecture integrating Checkmarx, CI/CD pipelines, and Agentic AI.

• Lead Zero Trust Architecture (ZTA) design, including:

• API Security

• Identity Management

• Role-Based Access Control (RBAC)

• Attribute-Based Access Control (ABAC)

• Define secure SDLC and Dev Sec Ops  frameworks.

• Drive LLM-based vulnerability detection and remediation governance.

• Oversee multi-agent decision governance, including LLM judge models and consensus controls.

• Conduct AI/ML security risk reviews covering:

• Model integrity

• Prompt injection

• Data leakage

• Define policies for automated remediation and escalation thresholds.

• Lead risk assessments and compliance mapping for:

• PCI-DSS

• SOX

• OSFI

• NIST

• Ensure auditability through:

• Trace IDs

• Evidence logs

• SIEM integration