Security Architect - AI AppSec

We are currently seeking an experienced Security Architect/AI Security AppSec to join our team! As a Security Architect, you will focus on assisting with the strategic evaluation and secure implementiation of our AI Agent Framework. As AI adoption accelerates across our investment and research teams, this role will be pivotal in ensuring our systems remain secur, resilient, and compliant, You will combine high-level architectural oversight–specifically evaluating new and emerging AI Technologies– with hands on engineering. Reporting to the Director of Security in Global Security organization, you will research security controls, validate emerging architectural patterns and define the governance standards for M365 Copilot Agents and autonomus agents built on Azure AI Foundary . Responsibilities Proactively evaluate new AI tools, frameworks, and LLM providers to assess their security posture and suitability for a highly regulated investment environement Design and validate secure architectural patters for AI agent integration within the organization’s ecosystemm ensuring data privacy and IP protection Conduct deep-dive analysis of AI specific threats (prompt injection, model inversion, data poisoning) and architect systemic mitigations Evaluate the security capabilities of Azure AI Foundary, M365 Copilot Studio, and the Microsoft Graph API against the organization’s compliance standards Assess Model Context Protocol (MCP) security best practices, designing isolationstrategies for context managment As a Security architect, assist with evaluations of other technologies being evaluated with our Enterprise Architecture Review Board 5+ years in Cloud Security/Architecture with deep hands-on Azure platform experience.

Hands-on experience with Azure AI Services, Azure OpenAI, Azure AI Foundary (or similar platforms like AWS SageMaker) Expert-level understanding of Microsoft Entra ID, Service Principals, and Managed Identity in a complex enterprise environment Deep familiarity with Model Context Protocol (MCP) and its implecations for data isolation and session security Strong grasp of RAG (Retrieal-Augmented Generation) pattersand vector database security. Zero Trust: Proven track record of implementing Zero Trust in financial services or cloud-native environments Experience with Infrastructure as Code (Terraform, Bicep) to codify security guardrails Familiarity with the OWASP Top 10 for LLMs and AI-specific vulnerability scanning. Qualifications Certifications: Azure Security Engineer Associate, Azure AI Engineer Associate, or CISSP/CCSP

401(k) Employee discounts Opportunity for advancement Benefits/Perks Flexible Work Environment Competitive Compensation Career Advancement Opportunities