Sr AI Architect, Application Security- Remote (Anywhere in the U.S.)

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk. General Description We are looking for a skilled AI Architect to support the GuidePoint Security Application Security Practice across three areas: architecting, building, and securing the agentic workflows that support consultant delivery; serving as a technical lead for our work with AI labs and model providers; and leading client-facing AI strategy, AI security architecture, and AI training engagements, while providing “Wow Them” service to clients and/or internal customers or co-workers. This is a builder, advisor, and technical liaison role. The AI Architect will be required to demonstrate strong AI/LLM engineering, agentic system design, and security architecture skills, and lead by influence across technical and business audiences. You will own the technical direction and secure design of the Practice’s internal AI platform, represent GuidePoint Security in technical discussions with the AI labs we work with, and embed in client environments as a security architect and AI strategy lead as engagements require. About the Application Security Practice The Application Security Practice helps clients identify, understand, and remediate risk in the applications and AI systems they build and buy. We perform hands-on technical assessments, threat modeling, secure code reviews, and architecture reviews, and we build and mature application security programs and Secure SDLC capabilities across our clients’ organizations. Our team of application security consultants, secure code reviewers, and AI/LLM security specialists covers modern web, mobile, IoT, and thick client platforms as well as AI-native and agentic architectures, testing against standards such as the OWASP Top 10 and the OWASP Top 10 for LLM and Agentic Applications. We partner with client development, DevSecOps, data science, and security leadership teams to embed security throughout the development lifecycle. We have invested heavily in agentic delivery: purpose-built agents, skills, and tool integrations that augment our consultants rather than replace them. Key areas of focus for this role include:

Architecting and scaling the agentic delivery platform behind our architecture reviews, threat modeling, program reviews, code reviews, and penetration testing, and securing our own AI systems to the same standard we hold our clients to Building technical relationships with the AI labs so we can put new platform capabilities to work for clients quickly Advancing client AI strategy, AI governance, and secure AI adoption as enterprises move from AI experimentation to production

We work directly with AI labs on technical enablement and support our consultants through lab training and certification programs, including Anthropic’s SME network and Claude certification track, so the team’s expertise keeps pace with the platforms our clients deploy. Roles and Responsibilities:

Help design the architecture, technical roadmap, and secure design of the Practice’s agentic delivery platform, the agents, skills, prompts, tool integrations, MCP servers, and orchestration workflows that enable consultant delivery of application architecture reviews, threat modeling, application security program reviews, secure code reviews, and application security assessments. Design, build, and maintain new agentic capabilities across the delivery portfolio, including agent workflows, retrieval and context strategies, tool and data-source integrations, and evaluation harnesses that measure the accuracy, coverage, and consistency of agent output against expert-reviewed baselines. Apply secure-by-design principles to the Practice’s own AI systems by threat modeling agent architectures, enforcing least-privilege tool scopes and autonomy boundaries, protecting client data across context windows and retrieval stores, governing model and provider selection, and implementing controls aligned to the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, the NIST AI Risk Management Framework, and MITRE ATLAS, while establishing the engineering standards and guardrails that govern AI-assisted delivery, including human-in-the-loop review gates, output validation, prompt and agent version control, change management, telemetry, and documented evidence of client-data handling sufficient to withstand client, contractual, and regulatory scrutiny. Serve as a forward-deployed security architect on client engagements, embedding with client engineering, platform, data science, and security teams to design, review, and harden application and AI architectures and to accelerate secure adoption of AI at enterprise scale. Deliver client-facing AI strategy and advisory services, including AI/ML and agentic architecture reviews, AI security program and governance assessments, AI threat modeling, secure AI reference architectures, and multi-phase roadmaps that move clients from AI pilots to governed production deployment. Develop and deliver AI and AI security training and enablement for both client audiences and internal consultants, covering secure AI and agentic development practices, prompt injection and agentic attack techniques, AI governance, and effective hands-on use of AI-assisted tooling. Serve as a primary technical point of contact with AI labs and model providers, working alongside Vendor Relationship Management, the Resource Management Office, Practice leadership, and the teams that own the commercial side of those relationships. Represent GuidePoint Security in technical discussions with the labs, evalua