Sr AI Architect, Application Security- Remote (Anywhere in the U.S.)
GuidePoint Security6 hours ago
Responsibilities
- Design the architecture, roadmap, secure design, agents, prompts, tool integrations, MCP servers, and orchestration workflows for the Practice’s agentic delivery platform.
- Build and maintain agentic capabilities involving orchestration, retrieval and context strategies, tool and data-source integrations, and evaluation harnesses.
- Threat model and secure internal AI systems using least-privilege controls, autonomy boundaries, client-data protections, model governance, human review gates, validation, version control, telemetry, and documented evidence.
- Serve as a forward-deployed security architect embedded with client engineering, platform, data science, and security teams.
- Deliver client-facing AI strategy, AI governance, AI security architecture, threat modeling, reference architectures, assessments, and production roadmaps.
- Develop and deliver secure AI, agentic development, AI governance, prompt-injection, and agentic-attack training for clients and internal consultants.
- Act as the primary technical liaison with AI labs and model providers and lead technical participation in partner, SME, and certification programs.
- Set technical direction for AI architecture, review designs, mentor consultants, and support service offerings, engagement scoping, and client pursuits.
- Contribute to AI security research and marketing through conferences, articles, whitepapers, webinars, and open-source tooling.
Requirements
- High school diploma plus seven years of experience, bachelor’s degree plus three years of experience, or a master’s degree.
- At least three years of experience in security architecture, application security, software engineering, or platform engineering with ownership of system-level design decisions.
- At least one year of enterprise consulting or client-facing technical advisory experience.
- Hands-on experience designing and building shipped AI agents and agentic systems involving orchestration frameworks, prompt engineering, tool and function calling, MCP servers, retrieval-augmented generation, context management, and evaluation harnesses.
- Ability to explain personally designed agentic systems, architecture and security tradeoffs, evaluation methods, and failure modes in a technical interview.
- Proficiency with LLM APIs and SDKs such as OpenAI, Anthropic, Amazon Bedrock, or Azure OpenAI, plus strong Python, TypeScript, JavaScript, or comparable-language development skills.
- Ability to threat model and securely architect AI-native and agentic systems, including practical knowledge of the OWASP Top 10 for LLM Applications and Agentic Applications.
- Working knowledge of application security assessments, threat modeling, secure code review, application architecture review, and Secure SDLC practices.
- Ability to communicate AI architecture and strategy to engineers and executives, represent the organization with technology partners, and lead through influence.
- Preferred qualifications include seven-plus combined years of IT and information security experience, enterprise AI strategy or governance advisory experience, forward-deployed architecture experience, technical training experience, DevSecOps/platform/MLOps/LLMOps experience, security community involvement, and relevant certifications such as Claude Certified Architect, OSWE, GWAPT, CISSP, or CCSP.
Benefits
- Remote workforce primarily, U.S.-based only, with up to 20% travel and possible on-site work for certain federal positions.
- Medical insurance options with employer premium contributions, including PPO and HDHP/HSA plans.
- Dental insurance with employer premium contributions.
- Twelve corporate holidays and a Flexible Time Off program.
- Mobile phone and home internet allowance.
- Retirement plan eligibility after two months at open enrollment.
- Pet benefit option.
Tech Stack
Categories
About GuidePoint Security
GuidePoint Security provides cybersecurity consulting, managed services, and value-added reselling/integration of security products for enterprises and U.S. public-sector agencies. Its teams deliver assessments, penetration testing, cloud and application security, identity and access management, endpoint and network protection, and governance services. Founded in 2011 and headquartered in Reston, Virginia, the privately held company serves Fortune 500 organizations and cabinet-level federal agencies.