AI Security Associate Architect

Responsibilities

• Architect security across products and platforms by leading security architecture reviews and design consultations.
• Develop reference architectures, secure design patterns, guardrails, and implementation guidance for engineering teams.
• Lead Secure AI architecture by conducting design reviews for AI-powered products, features, and internal development workflows.
• Build and evolve threat models for AI systems, addressing risks like prompt injection, model integrity, and AI supply chain security.
• Drive threat modeling and risk-informed design across web, API, mobile, cloud, container, and Kubernetes architectures.
• Partner with engineering teams as a trusted technical advisor on new initiatives, architectural pivots, and vendor decisions.
• Strengthen the Security Architecture practice by improving knowledge bases, review templates, and mentoring engineers.

Requirements

• 7+ years of experience in security architecture, product security, application security, or cloud security engineering.
• Hands-on expertise with at least one major cloud platform (AWS, Azure, or GCP), including identity, networking, and data protection.
• Practical experience securing modern application architectures, including APIs, microservices, containers, Kubernetes, and CI/CD.
• Working knowledge of GenAI and LLM security, including prompt injection, model integrity, and secure AI design patterns.
• Strong threat modeling skills using frameworks such as OWASP, NIST, or MITRE ATLAS.
• Ability to engage deeply with technical teams and discuss code in Python, Go, Java, or similar languages.
• Excellent written and verbal communication skills to influence senior engineers and translate complex security trade-offs.

Preferred Qualifications

• Hands-on experience with Google Cloud security (Vertex AI, IAM, VPC Service Controls).
• Experience designing AI/ML platforms such as SageMaker, Bedrock, or Azure AI.
• Experience with AI red teaming, adversarial ML evaluation, or LLM security testing.
• Experience with software supply chain security (SBOM, SLSA) and Infrastructure as Code (Terraform, CDK).
• Relevant security certifications such as OSCP, CKA/CKS, or Cloud Security Specialty certifications.

Benefits

• Hybrid work model with flexible arrangements.
• Comprehensive benefit plans including flexible vacation and mental health support.
• Career development through "Grow My Way" programming and a skills-first approach.
• Paid volunteer days and opportunities for social impact.

About the Company

Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media.