Principal Security Architect

The Opportunity

"As a Principal AI/ML Security Architect in Product Security you will define the strategy and technical implementation of an AI/ML secure development lifecycle, integrated with our existing software development lifecycle. You will lead our journey to empower development teams toward self-disposition and greater leverage of their Security Champions. You will collaborate closely with development teams and the larger Cybersecurity Trust organization to embed security into the development lifecycle from design, through development into production and runtime." - Cyber Security-Sr Director

What You’ll Contribute

• Lead the development and implementation of an AI/ML secure development lifecycle, coordinating with key stakeholders including architecture, engineering, and governance teams.

• Evaluate the development organization’s current approaches to GenAI usage and AI/ML models, and define comprehensive requirements and processes comprising an AI/ML secure development lifecycle.

• Evaluate the organization's current supply chain security posture and identify areas for improvement in collaboration with key stakeholders.

• Lead the development and implementation of a comprehensive supply chain security strategy that includes everything in the product lifecycle, vertically and horizontally, including the security of the development infrastructure, the source code produced or consumed through the open-source community, the build and delivery pipelines, and the security of the runtime.

• Establish and maintain secure software development practices, including secure coding standards, threat modeling, and penetration testing.

• Work closely with development teams to embed the security strategy and practices throughout the development lifecycle.

• Build boilerplates, skeleton projects and testing automation suites for secure coding and secure supply chain to accelerate adoption of security by the different teams, with alignment to standards and practices such as Google SLSA and OWASP CycloneDX.

• Provide technical guidance to development teams on security best practices, security architecture, and security controls.

• Stay current with emerging trends and technologies in AI/ML, supply chain security and DevSecOps and evaluate their potential impact on the organization.

What We’re Seeking

• In-depth experience as a security architect, preferably in AI/ML security.

• Hands-on experience and solid understanding of secure LLM practices and threat management.

• Strong understanding and hands-on experience building CI/CD ecosystems to meet the demands of agile and secure development.

• Strong understanding of supply chain security, software integrity, and secure software delivery.

• Extensive architectural understanding of cloud security, Kubernetes, cloud-native computing, and microservices.

• Previous hands-on experience writing code and working within an engineering team preferred.

• Preferred experience building agentic AI solutions.

• Experience with AWS and Amazon Bedrock desired.

• Experience working with cross-functional teams.

• Excellent communication and leadership skills.

• Strong problem-solving and analytical skills.

• Ability to prioritize and manage multiple tasks and projects simultaneously.

• A proven track record of designing, building, and operating complex security systems.

Our Offer to You

• An inclusive culture strongly reflecting our core values:  Act Like an Owner, Delight Our Customers and Earn the Respect of Others.

• The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences.

• Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so.

• An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.

• The targeted base pay range for this role is: $161,000 to $253,000 with this range reflecting differences in candidate knowledge, skills and experience.
   

#LI-RR1

#LI-remote