AI Security Architect with Cloud - NY/NJ (Hybrid)

· 8–12 years of experience in cybersecurity, information security, infrastructure security, cloud security, or security architecture.

· 3+ years of experience designing and reviewing enterprise security architectures.

· Strong knowledge of network security, application security, cloud security, IAM, cryptography, and security operations.

· Experience with threat modelling frameworks such as STRIDE, MITRE ATT&CK, or equivalent methodologies.

· Strong understanding of security principles including least privilege, zero trust, defense in depth, secure-by-design, and separation of duties.

· Experience conducting security risk assessments and developing risk-treatment plans.

· Hands-on knowledge of security controls, vulnerabilities, penetration testing, incident response, and disaster recovery.

· Experience working with architecture frameworks, security policies, control standards, and governance processes.

· Strong communication skills, with the ability to explain complex security risks to technical and business stakeholders.

· Demonstrated ability to influence engineering teams and drive security improvements across projects.

Preferred qualifications

· Experience securing AWS, Azure, or Google Cloud environments.

· Knowledge of Kubernetes, containers, service meshes, serverless systems, and cloud-native architectures.

· Experience with DevSecOps tools, CI/CD security, SAST, DAST, SCA, IaC scanning, secrets scanning, and container security.

· Familiarity with SIEM, SOAR, EDR, XDR, WAF, CSPM, CNAPP, DLP, and vulnerability-management platforms.

· Experience with API security, microservices security, OAuth 2.0, OpenID Connect, SAML, and JWT.

· Knowledge of data classification, encryption, tokenization, key management, and privacy engineering.

· Experience with security automation using Python, PowerShell, Terraform, or similar tools.

· Familiarity with AI/ML security, LLM application security, prompt injection, data leakage, and model governance.

· Experience with regulatory and security frameworks such as NIST CSF, NIST SP 800-53, CIS Controls, ISO 27001, SABSA, COBIT, and OWASP.

· Professional certifications such as CISSP, CCSP, SABSA, CISM, GIAC, AWS Security Specialty, or Azure Security Engineer.

Technical skills

Area Technologies and knowledge

Cloud security - AWS, Azure, GCP, IAM, KMS, GuardDuty, Defender, Security Command Center

Network security - Firewalls, WAF, VPN, IDS/IPS, segmentation, NAC, zero trust

Identity security - SSO, MFA, RBAC, ABAC, PAM, OAuth 2.0, OIDC, SAML

Security operations - SIEM, SOAR, EDR, XDR, SOC processes, incident response

Application security - OWASP, API security, SAST, DAST, SCA, threat modelling

DevSecOps - Jenkins, GitHub Actions, GitLab CI, Terraform scanning, container security

Infrastructure - Kubernetes, Docker, Linux, Windows, virtualization, service meshes

Data security - Encryption, DLP, tokenization, secrets management, key management

Governance - ISO 27001, NIST, CIS Controls, SOC 2, PCI DSS, GDPR

Automation - Python, PowerShell, Bash, Terraform, policy-as-code