Lead Cybersecurity Architect, AI/Agentic Security
Salary not listed • Chicago, IL, United States • Full-time
Posted 23d ago
No salary is listed. Many US states require employers to post a pay range, so ask about pay early.
Remote Work Policy
On-site
Employment Type
Full-time
Categories
AI Engineer
About the job
Join one of the world's most influential companies and leverage your skills in cybersecurity to have a real impact on the financial industry. As a Lead Cybersecurity Architect within Cybersecurity Technology & Controls, you will be an integral part of a team developing high-quality cybersecurity solutions for software applications on modern cloud-based technologies. You will be responsible for carrying out critical cybersecurity architecture solutions by identifying, creating, and communicating risk, mitigation options, and solutions across multiple technical areas within various business functions in support of project goals.
Responsibilities
- Engage technical teams and business stakeholders to propose technical approaches for current and future cybersecurity needs.
- Define the technical target state of cybersecurity products and drive strategy achievement.
- Develop software and use firmwide AI/ML tools to enhance, automate, and improve secure design and threat assessment processes.
- Own and drive Security Design Reviews (SDRs) for AI/ML platforms, agentic systems, and MCP integrations, documenting decisions, required controls, and risk acceptances.
- Demonstrate experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
- Assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
- Define and govern secure reference architectures for agentic systems and MCP-enabled workflows, including isolation, segmentation, encryption, and identity management.
- Define security requirements for authentication, authorization, data classification, and encrypted communications for MCP servers and agentic workflows.
- Conduct and maintain threat models for agentic systems, MCP servers, and LLM Suite integrations, identifying and mitigating risks such as prompt injection, data leakage, and supply chain threats.
Requirements
- 5+ years of cybersecurity architectural knowledge with hands-on practical experience delivering enterprise-level solutions and controls.
- Advanced proficiency in one or more programming languages.
- Hands-on experience coding and using AI/ML and agents to improve security assessments; willing to work on POCs for new innovative ideas.
- Demonstrated ownership of Security Design Reviews (SDRs), security requirements, and architecture governance for large-scale platforms.
- Proven expertise in threat modeling and mitigating AI/ML risks such as prompt injection, data poisoning, model extraction/inversion, training data leakage, and third-party/supply-chain exposure.
- Strong hands-on technical depth across cloud and application security: IAM/least privilege, encryption & key management, secrets, network segmentation, secure APIs, logging/monitoring, and secure SDLC/CI/CD.
- Experience securing agentic AI systems and tool integrations (including MCP-based tool/data connectivity or similar protocols), with the ability to set guardrails for tool access, data handling, and runtime controls.
- Proficiency in all aspects of the Software Development Life Cycle.
- Demonstrated proficiency in software applications and technical processes within a technical discipline (e.g., public cloud, artificial intelligence, machine learning, mobile).
- In-depth knowledge of the financial services industry along with their IT systems and experience communicating with senior leaders.
- Ability to evaluate current and emerging technologies to recommend the best solutions for future state architecture.