Note: The job is a remote job and is open to candidates in USA. SoTalent is a professional services company seeking a Lead AI Security Engineer to drive the security strategy, architecture, and operational resilience of enterprise AI platforms. The role leads threat modeling, security architecture reviews, adversarial testing, cloud-native security, risk management, governance, and compliance efforts while advising technical and executive stakeholders.
Responsibilities
- Own and oversee the end-to-end security posture of enterprise AI and intelligent automation platforms
- Define security architecture standards, policies, and controls for AI applications and services
- Establish security best practices that support secure development, deployment, and operation of AI solutions
- Provide technical leadership on AI security strategy and platform risk management
- Conduct comprehensive threat modeling exercises for AI systems, cloud services, APIs, and infrastructure
- Identify, assess, and prioritize security risks associated with AI workflows, data pipelines, and model deployment processes
- Develop mitigation strategies that address both traditional cybersecurity risks and AI-specific attack vectors
- Lead security reviews throughout the software and platform development lifecycle
- Design and implement security controls for cloud-native platforms and distributed environments
- Secure containerized workloads, orchestration platforms, and cloud infrastructure services
- Ensure strong identity, access management, and workload authentication practices across environments
- Collaborate with engineering teams to strengthen infrastructure resilience and operational security
- Lead penetration testing, security assessments, and red-team exercises focused on AI and platform technologies
- Validate security controls through adversarial testing and simulated attack scenarios
- Identify vulnerabilities across infrastructure, applications, APIs, and deployment pipelines
- Drive remediation efforts and continuous improvement initiatives following security assessments
- Establish controls that protect software supply chains, deployment pipelines, and third-party dependencies
- Evaluate platform components for security, integrity, and operational risk
- Implement automated security validation and governance mechanisms throughout the development process
- Support secure software delivery practices and dependency management programs
- Ensure security programs align with industry standards, governance frameworks, and regulatory requirements
- Support audits, compliance reviews, risk assessments, and security certification activities
- Develop security documentation, control frameworks, operational procedures, and risk reporting mechanisms
- Partner with legal, compliance, and governance teams on security-related initiatives
- Act as the primary security advisor for strategic AI platform initiatives and client engagements
- Communicate security risks, recommendations, and architectural decisions to both technical and executive audiences
- Build trusted relationships with internal stakeholders and external partners
- Support highly regulated environments requiring rigorous security and compliance controls
Skills
- Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline
- Minimum 10+ years of experience in Security Engineering, Cloud Security, Cybersecurity Architecture, or related fields
- Extensive experience designing and securing cloud-native platforms and distributed systems
- Deep understanding of infrastructure security, container security, and modern security architectures
- Experience performing threat modeling, risk assessment, and security architecture reviews
- Strong background in offensive security, penetration testing, and adversarial security assessments
- Experience supporting regulated environments with complex compliance requirements
- Excellent communication, leadership, and stakeholder management skills
- AI Security
- Threat Modeling
- Cloud-Native Security
- Kubernetes Security
- Container Security
- Infrastructure Security
- Workload Identity Management
- Penetration Testing
- Offensive Security
- Security Architecture
- Policy as Code
- Software Supply Chain Security
- DevSecOps
- Security Automation
- Zero Trust Architecture
- Cloud Security Governance
- Vulnerability Management
- Risk Management & Compliance
Benefits
- Remote work setting
Company Overview