Security Architect - AI Threat Modeler (b3617)

Job Description:

Security Architect ndash; AI Threat Modeler

Overview

We are seeking an experienced Cybersecurity Architect to work as an AI Threat Modeler as part of our Cybersecurity Architecture team. In this role, you will be responsible for identifying, analyzing, and mitigating security threats specific to artificial intelligence (AI) and machine learning (ML) systems. You will collaborate with engineering, data science, and security teams to ensure that AI-driven solutions are robust, resilient, and compliant with industry standards and regulations. You will also occasionally be asked to contribute to security system design, architecture frameworks, and technology strategy, with a focus on emerging AI technologies

Key Responsibilities

• Analyze the design and architecture of AI solutions (chatbots, agents, agentic systems, etc.) to identify security vulnerabilities, threats, and attack vectors
• Develop and maintain threat models for AI/ML systems, considering adversarial machine learning, data poisoning, model inversion, prompt injection, privacy risks, misuse scenarios, and other AI-specific threats.
• Assess AI system components (including data pipelines, model training, inference, APIs, deployment environments, etc.) for susceptibility to attacks and compliance with security standards.
• Create detailed threat reports outlining identified risks, recommended mitigations, and business impact.
• Collaborate with business units, product owners, and engineering teams to prioritize and implement security controls and mitigations for the vulnerabilities and risks found.
• Stay current with emerging threats, vulnerabilities, and best practices in AI/ML security.
• Provide training and guidance to technical teams on secure AI/ML development and deployment practices.
• Contribute to the development of AI security architecture frameworks, policies, and standards.

Skills & Experience

• Bachelors/Masters degree (or similar) in Computer Science, Cybersecurity, Data Science, or a related field.
• 5+ years of experience in Cybersecurity Architecture, Threat Modeling, or AI/ML engineering.
• Strong understanding of AI/ML concepts, architectures, and common frameworks (e.g., TensorFlow, PyTorch, Scikit-learn).
• Applied knowledge of threat modeling and threat modeling techniques (e.g., STRIDE, DREAD, PASTA) and security risk assessment.
• The ability to extract/clarify/understand business requirements and solution designs from project teams, to identify threats and risks and to translate potential risks into security requirements which the project teams must implement
• Familiarity with AI/ML-specific threats such as adversarial examples, model extraction, and data poisoning.
• Excellent analytical, communication, and documentation skills. Ability to communicate complex AI security risks to technical and non-technical stakeholders is a must.
• Ability to work collaboratively in cross-functional teams.

Preferred Skills

• Experience with cloud-based AI/ML platforms (e.g., AWS SageMaker, Azure ML, Google AI Platform).
• Knowledge of regulatory requirements and standards related to AI/ML (e.g., NIST AI RMF, ISO/IEC 27001).
• Security certifications (e.g., CISSP, CCSP, OSCP) or AI/ML certifications are a plus.
• Experience with threat modeling tools and knowledge of MITRE frameworks (ATLAS, CAPEC, ATT&CK, D3FEND)

Architecte de la s curit mod llisateur/modlisatrice, Menaces lies lIA

Aperu

Nous sommes la recherche dune personne chevronne en architecture de la cybers curit pour travailler comme modlisateur/modlisatrice, Menaces lies lIA. Dans le cadre de vos fonctions, il vous incombera de rep rer, d analyser et d att nuer les menaces la s curit propres aux syst mes dintelligence artificielle (IA) et dapprentissage automatique. Vous collaborerez avec les quipes Ing nierie, Science des donn es et S curit afin de vous assurer que les solutions ax es sur lIA sont robustes, r silientes et conformes aux normes et la r glementation du secteur. Vous devrez aussi contribuer loccasion la conception des syst mes de s curit , aux cadres darchitecture et la strat gie technologique, en mettant laccent sur les technologies dIA mergentes.

Principales responsabilit s

• Analyser la conception et larchitecture des solutions dIA (robots conversationnels, agents, syst mes autonomes, etc.) afin de rep rer les vuln rabilit s, les menaces et les vecteurs dattaque
• Mettre au point et tenir jour des mod les de menaces pour les syst mes dIA/dapprentissage automatique, en tenant compte de lapprentissage automatique antagoniste, de lempoisonnement de donn es, de linversion de mod le, de linfiltration de requ te, des risques li s la protection des renseignements personnels, des sc narios de mauvais usage et dautres menaces li es lIA