Key Responsibilities

• Develop AI-powered threat modeling assistants to identify architectural risks and recommend security controls.
• Build ML/NLP solutions to analyze architecture documents, network diagrams, and security review submissions.
• Implement RAG pipelines using security standards, compliance frameworks, and approved architecture patterns.
• Develop AI agents for automated risk scoring, threat analysis, and remediation recommendations.
• Build Python-based APIs and integrate AI tools with GRC platforms, JIRA, Confluence, and cloud security services.
• Automate architecture security reviews and monitor AI accuracy, testing, and deployment.

Required Technical Skills

• Programming & ML: Python, scikit-learn, PyTorch, NLP.
• AI/LLM: Azure OpenAI, OpenAI APIs, Prompt Engineering, RAG, LangChain.
• Backend: FastAPI/Flask, REST APIs, Docker, Git.
• Threat Modeling: STRIDE, PASTA, LINDDUN, MITRE ATT&CK.
• Security Architecture: Zero Trust, Defense-in-Depth, Microsegmentation, Cloud Security.
• Frameworks: ISO 27001, NIST CSF, CIS Benchmarks, TOGAF.
• Integrations: ServiceNow GRC, Archer, JIRA, Confluence, Azure/GCP/AWS security services.

Required Experience

• 4–6 years in software engineering, with at least 1 year in AI/ML or NLP applications.
• Working knowledge of threat modeling, security architecture, risk assessment, and compliance frameworks.

Preferred Skills & Certifications

CompTIA Security+, CEH, CCSP, SC-200, Semantic Kernel, AutoGen, Microsoft Threat Modeling Tool, IriusRisk, or ThreatModeler.