General Description

We are looking for a skilled AI Architect to support the GuidePoint Security Application Security Practice across three areas: architecting, building, and securing the agentic workflows that support consultant delivery; serving as a technical lead for our work with AI labs and model providers; and leading client-facing AI strategy, AI security architecture, and AI training engagements, while providing “Wow Them” service to clients and/or internal customers or co-workers.

This is a builder, advisor, and technical liaison role. The AI Architect will be required to demonstrate strong AI/LLM engineering, agentic system design, and security architecture skills, and lead by influence across technical and business audiences. You will own the technical direction and secure design of the Practice’s internal AI platform, represent GuidePoint Security in technical discussions with the AI labs we work with, and embed in client environments as a security architect and AI strategy lead as engagements require.

About the Application Security Practice

The Application Security Practice helps clients identify, understand, and remediate risk in the applications and AI systems they build and buy. We perform hands-on technical assessments, threat modeling, secure code reviews, and architecture reviews, and we build and mature application security programs and Secure SDLC capabilities across our clients’ organizations.

Our team of application security consultants, secure code reviewers, and AI/LLM security specialists covers modern web, mobile, IoT, and thick client platforms as well as AI-native and agentic architectures, testing against standards such as the OWASP Top 10 and the OWASP Top 10 for LLM and Agentic Applications. We partner with client development, DevSecOps, data science, and security leadership teams to embed security throughout the development lifecycle.

We have invested heavily in agentic delivery: purpose-built agents, skills, and tool integrations that augment our consultants rather than replace them. Key areas of focus for this role include:

• Architecting and scaling the agentic delivery platform behind our architecture reviews, threat modeling, program reviews, code reviews, and penetration testing, and securing our own AI systems to the same standard we hold our clients to
• Building technical relationships with the AI labs so we can put new platform capabilities to work for clients quickly
• Advancing client AI strategy, AI governance, and secure AI adoption as enterprises move from AI experimentation to production

We work directly with AI labs on technical enablement and support our consultants through lab training and certification programs, including Anthropic’s SME network and Claude certification track, so the team’s expertise keeps pace with the platforms our clients deploy.

Roles and Responsibilities:

• Help design the architecture, technical roadmap, and secure design of the Practice’s agentic delivery platform, the agents, skills, prompts, tool integrations, MCP servers, and orchestration workflows that enable consultant delivery of application architecture reviews, threat modeling, application security program reviews, secure code reviews, and application security assessments.
• Design, build, and maintain new agentic capabilities across the delivery portfolio, including agent workflows, retrieval and context strategies, tool and data-source integrations, and evaluation harnesses that measure the accuracy, coverage, and consistency of agent output against expert-reviewed baselines.
• Apply secure-by-design principles to the Practice’s own AI systems by threat modeling agent architectures, enforcing least-privilege tool scopes and autonomy boundaries, protecting client data across context windows and retrieval stores, governing model and provider selection, and implementing controls aligned to the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, the NIST AI Risk Management Framework, and MITRE ATLAS, while establishing the engineering standards and guardrails that govern AI-assisted delivery, including human-in-the-loop review gates, output validation, prompt and agent version control, change management, telemetry, and documented evidence of client-data handling sufficient to withstand client, contractual, and regulatory scrutiny.
• Serve as a forward-deployed security architect on client engagements, embedding with client engineering, platform, data science, and security teams to design, review, and harden application and AI architectures and to accelerate secure adoption of AI at enterprise scale.
• Deliver client-facing AI strategy and advisory services, including AI/ML and agentic architecture reviews, AI security program and governance assessments, AI threat modeling, secure AI reference architectures, and multi-phase roadmaps that move clients from AI pilots to governed production deployment.
• Develop and deliver AI and AI security training and enablement for both client audiences and internal consultants, covering secure AI and agentic development practices, prompt injection and agentic attack techniques, AI governance, and effective hands-on use of AI-assisted tooling.
• Serve as a primary technical point of contact with AI labs and model providers, working alongside Vendor Relationship Management, the Resource Management Office, Practice leadership, and the teams that own the commercial side of those relationships. Represent GuidePoint Security in technical discussions with the labs, evaluate new platform capabilities and roadmaps, and bring what we learn back into our services and tooling.
• Lead GuidePoint Security’s technical participation in lab subject-matter-expert and partner programs (such as Anthropic’s SME network and certification tracks, and similar programs at other providers), and work with the Learning & Development team on SME training, certification pathways, and onboarding so AI expertise grows across the organization.
• Act as the senior technical authority and mentor for AI architecture within the Practice, setting direction, reviewing designs, upskilling consultants, and partnering with Practice leadership, sales, and solutions architects to shape new service offerings, scope engagements, and support client pursuits.
• Contribute to AI and agentic security research and marketing initiatives through activities such as speaking at industry conferences, authoring blog articles and whitepapers, delivering webinars, and contributing to open-source security tooling, while maintaining a strong desire to learn, adapt, and improve along with a rapidly-growing company, and perform other duties as assigned.

Required Experience and Education:

• High School Diploma + 7 years of experience OR Bachelor’s Degree (BS/BA) + 3 years of experience OR Master’s Degree (MS/MA)
• Minimum of three (3) years of experience in a security architecture, application security, software engineering, or platform engineering role with demonstrated ownership of system-level design decisions
• Minimum of one (1) year of experience in an enterprise-level consulting or client-facing technical advisory role
• Demonstrable hands-on experience designing and building AI agents and agentic systems (evaluated on the depth, recency, and complexity of what the candidate has actually shipped rather than years of elapsed experience), spanning agent orchestration frameworks, agent skills and prompt engineering, tool and function calling, MCP servers and tool integrations, retrieval-augmented generation, context management, and evaluation harnesses
• Able to substantiate that AI experience in a technical interview by walking through agentic systems they have personally designed and built, the architecture and security tradeoffs they made, how they evaluated agent output quality, and where their approach failed and why
• Proficiency building against LLM APIs and SDKs (e.g., OpenAI, Anthropic, Amazon Bedrock, Azure OpenAI) with strong development and scripting skills in Python, TypeScript/JavaScript, or a comparable language
• Demonstrated ability to threat model and securely architect AI-native and agentic systems, including practical command of the OWASP Top 10 for LLM Applications and the OWASP Top 10 for Agentic Applications
• Working knowledge of application security assessment, threat modeling, secure code review, application architecture review, and Secure SDLC practices sufficient to architect automation that supports them
• Proven ability to communicate architecture decisions and AI strategy to both engineering teams and executive stakeholders, to represent the organization credibly with external technology partners, and to lead by influence across technical and business audiences
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Preferred Experience and Education

• Over seven (7+) combined years of IT and information security experience, including prior application security or software architecture responsibility
• Experience delivering AI strategy, AI governance, or responsible-AI advisory work to enterprise clients, including alignment to frameworks such as the NIST AI Risk Management Framework, ISO/IEC 42001, or the EU AI Act
• Experience as a forward-deployed, embedded, or resident architect working day-to-day alongside client engineering teams
• Experience developing and delivering technical training, workshops, or enablement programs to technical and executive audiences, and/or participation in vendor technical partner, design-partner, or subject-matter-expert programs such as Anthropic’s SME network
• Internal operational (non-consulting) experience, particularly in DevSecOps, platform engineering, or MLOps/LLMOps
• InfoSec community involvement such as conference speaking, blog/whitepaper authoring, open-source contribution, or podcast speaking/producing
• Relevant industry certifications, including AI and agentic architecture credentials such as Anthropic’s Claude Certified Architect (Foundations or Professional), comparable AI/ML and generative AI certifications from AWS, Microsoft, Google Cloud, or NVIDIA, and application security and architecture certifications such as OSWE, GWAPT, CISSP, or CCSP. GuidePoint Security supports consultants in earning these certifications after hire, so they are a plus rather than a prerequisite

Travel Requirements:

• Up to 20% travel

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day