Security Architect – AI AppSec
About The Position
The Security Architect / AI Security AppSec Architect will support the strategic evaluation and secure implementation of the organization’s AI Agent Framework. As AI adoption grows across investment and research teams, this role will help ensure systems remain secure, resilient, and compliant. It combines architectural oversight, including evaluation of emerging AI technologies, with hands-on engineering. Reporting to the Director of Security in the Global Security organization, the role researches security controls, validates emerging architectural patterns, and defines governance standards for M365 Copilot Agents and autonomous agents built on Azure AI Foundry. The position also assists with evaluations of other technologies through the Enterprise Architecture Review Board.
Requirements
- At least 5 years of experience in cloud security or architecture, with deep hands-on Azure platform experience.
- Hands-on experience with Azure AI Services, Azure OpenAI, and Azure AI Foundry, or similar platforms such as AWS SageMaker.
- Expert-level understanding of Microsoft Entra ID, Service Principals, and Managed Identity in a complex enterprise environment.
- Deep familiarity with Model Context Protocol (MCP) and its implications for data isolation and session security.
- Strong understanding of RAG patterns and vector database security.
- Proven track record implementing Zero Trust controls in financial services or cloud-native environments.
- Experience using Infrastructure as Code, such as Terraform or Bicep, to codify security guardrails.
- Familiarity with the OWASP Top 10 for LLMs and AI-specific vulnerability scanning.
Nice To Haves
- Azure Security Engineer Associate certification.
- Azure AI Engineer Associate certification.
- CISSP or CCSP certification.
Responsibilities
- Evaluate emerging AI tools, frameworks, and LLM providers for security posture and suitability in a highly regulated investment environment.
- Design and validate secure architectural patterns for AI agent integration, protecting data privacy and intellectual property.
- Analyze AI-specific threats, including prompt injection, model inversion, and data poisoning, and design systemic mitigations.
- Assess the security capabilities of Azure AI Foundry, M365 Copilot Studio, and the Microsoft Graph API against organizational compliance standards.
- Assess Model Context Protocol (MCP) security practices and design isolation strategies for context management.
- Assist with evaluations of other technologies through the Enterprise Architecture Review Board.
- Create hardening checklists and configuration standards for AI platforms.
- Test and document integration approaches involving Azure Key Vault, Entra ID, and Managed Identities.
- Implement advanced logging, auditing, and monitoring for AI agent telemetry and autonomous actions.
- Lead creation of the organization's AI Agent Security Design Principles document.
- Assist teams in developing technical sections of governance policies for emerging AI technology and autonomous workflow risks.
- Identify and address control gaps in CI/CD pipelines to support secure, automated AI deployments.
- Translate security architectures into actionable implementation guides for developers and investment technology teams.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
