Principal Security by Design architect

Global Foundries•Malta, NY

41d

About The Position

The Security by Design Architect will partner with application development and AI/ML teams across the enterprise to embed security by design principles early in the lifecycle ("shift left"). This role will ensure that both traditional applications and emerging AI systems (including generative AI, agentic workflows, and ML models) are designed, built, and operated with security, resilience, and compliance at their core. In addition, the architect will champion security advocacy, fostering a global culture of secure development and responsible AI adoption.

Requirements

8+ years of experience in application security, enterprise architecture, or secure software engineering.
Strong understanding of secure design principles, DevSecOps, and threat modeling.
Experience with AI/ML platforms.
Familiarity with AI-specific risks: prompt injection, model theft, data poisoning, adversarial inputs.
Proven ability to work across global, cross-functional teams and influence without direct authority.

Nice To Haves

Professional certifications: CSSLP, CISSP, SABSA, cloud security (AWS/Azure), or AI governance credentials.
Hands-on experience with application or ML model development.
Knowledge of regulatory landscapes impacting AI (EU AI Act, NIST AI RMF, ISO/IEC AI standards).
Familiarity with secure agentic frameworks, guardrails, and alignment monitoring.
Strong executive communication and security evangelism skills.

Responsibilities

Partner with application, platform, and AI development teams to embed security requirements into design and development processes.
Define and maintain secure design patterns for applications, APIs, and AI/ML pipelines.
Integrate threat modeling, secure coding standards, and automated security testing into DevSecOps workflows.
Establish early validation checkpoints for application and AI projects to prevent downstream risks.
Align secure design with enterprise reference architectures and compliance frameworks (NIST, CMMC, ISO 27001, GDPR, AI Act, etc.).
Develop and enforce security frameworks for AI/ML model development, deployment, and monitoring.
Support model validation processes (fairness, robustness, adversarial resistance, data lineage).
Define controls for protecting training data, model IP, and inference pipelines.
Collaborate on emerging paradigms such as agentic AI security, guardrails, and alignment assurance.
Map AI security requirements to frameworks such as OWASP LLM Top 10 and MITRE ATLAS.
Act as a global advocate for security by design, promoting awareness and adoption across diverse teams.
Build and support communities of practice and "security champion" programs in development teams.
Develop and deliver training, workshops, and playbooks to raise developer and data scientist awareness.
Translate complex security concepts into clear, actionable guidance for technical and non-technical audiences.
Partner with HR/Comms to run enterprise-wide security culture and awareness campaigns.
Work across enterprise architecture, identity, observability, and network teams to ensure holistic coverage.
Partner with data governance and AI ethics teams to align security with responsible AI initiatives.
Influence vendor and partner engagements to ensure secure adoption of emerging technologies.
Provide security leadership during solution design reviews, RFPs, and architecture boards.
Perform all activities in a safe and responsible manner and support all Environmental, Health, Safety & Security requirements and programs.