> Markdown version of [/jobs/ext/4625992-ai-security-architect-applied-ai-security](https://www.wearedevelopers.com/jobs/ext/4625992-ai-security-architect-applied-ai-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AI Security Architect - Applied AI Security

- **Company:** BLBS, LLC
- **Location:** San Francisco, CA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Cyber Security, Fraud Prevention and Detection, OpenAI, Red Team (Cyber Security), Software Safety, SQL Injection, LangChain, Retrieval-Augmented Generation, Large Language Models, Multi-Agent Systems, Model Validation, Agentic-AI, Rate Limiting, Infrastructure Automation Frameworks, Deployment Automation, CrewAI, Virtual Agents, Model Inference
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25303_ca3238b1721e9b1d63efe47b477c28c7

## About the Role

* 6+ years in security engineering or architecture; 2+ years focused on ML/AI systems
 * Deep understanding of LLM internals: pretraining, RLHF, inference, safety alignment mechanisms - and how each layer can be attacked
 * Hands-on experience with prompt injection, jailbreak research, or adversarial ML (published work, CTF, or production red team)
 * Experience building or evaluating security for production AI systems (not just reading papers)
 * Familiarity with AI agent frameworks: LangChain, CrewAI, OpenAI Assistants, Anthropic's tool use, MCP

Strong Signal

 * Published red team research, CVEs in AI tooling, or presented at Black Hat / DEF CON / IEEE S&P on AI security topics
 * Experience with TEE deployment in production (SGX/TDX/SEV-SNP)
 * Background in financial services, crypto, or other high-stakes transaction systems
 * Contributed to AI safety frameworks (responsible disclosure, model cards, safety evals)

## Description

As we deploy AI agents across trading, risk, compliance, and customer systems, we're building the security architecture that keeps those systems trustworthy at scale.

This isn't a compliance checkbox role. You'll architect the security layer for systems where a compromised AI agent can authorize transactions, move funds, or access millions of user records. The threat model includes nation-state actors, sophisticated financial fraud, and the exact class of autonomous AI attack campaigns that are actively targeting financial infrastructure today.

You'll work directly with Group Risk & Security leadership to define how we build, deploy, and operate AI safely - from model selection to runtime monitoring to red team automation., AI System Security Architecture

 * Design end-to-end security architecture for AI stack: LLM inference pipelines, AI agents, MCP-based tool orchestration, and agentic workflows
 * Define trust boundaries, authorization models, and least-privilege principles for multi-agent systems
 * Architect the AI Security Gateway: prompt/response inspection, rate limiting, anomaly detection, circuit breaking across all AI-powered products

Threat Modeling & Red Teaming

 * Build and operate an AI-specific threat model covering prompt injection, jailbreak, model inversion, supply chain poisoning, and autonomous agent misuse
 * Lead red team exercises against our AI deployments; evolve our Red vs Blue automation platform (currently in production, LLM-driven)
 * Define detection signatures for AI-assisted attacks - we've seen the Hermes/Strix/Cairn class of autonomous attack campaigns firsthand

Secure AI Development Lifecycle (AI-SDL)

 * Define security review processes for AI features: model selection, fine-tuning pipelines, RAG system design, tool call authorization
 * Evaluate third-party AI vendors and integrations (model APIs, vector DBs, agent frameworks) for security posture
 * Work with product and infra teams to embed security requirements from design through deployment

TEE & Confidential Computing

 * Architect TEE-based deployments for sensitive AI inference (AMD SEV-SNP, Nvidia Confidential Computing)
 * Design attestation flows, measurement coverage, and post-deployment verification - with the rigor of a Trail of Bits-level audit, * The threat surface is real. AI-powered autonomous attack campaigns are already hitting financial infrastructure. You won't be building defenses for hypothetical future threats - the Cairn-class agent that chains SQLi * RCE * AWS secrets extraction in one autonomous run is already operational against our industry.
 * The scope is unusually large. We run AI across risk scoring, fraud detection, customer support, compliance screening, and internal tooling. The security architecture you design will cover all of it.
 * You'll ship, not just advise. This role produces systems, not slide decks. Red team automation platform, AI security gateway, TEE attestation flows - built and running in production.
 * Becoming a product. Our security capabilities are on a path to commercialization. The AI security architecture you build here will eventually be offered as a product to other exchanges and financial institutions.