Posted 4 months ago
AI Security Architect – Application Security, Zero Trust & AI Governance
@ Astra North Infoteck Inc.
Toronto, Ontario
Overview
Astra North Infoteck Inc. is hiring an AI Security Solution Architect to lead the design and governance of an AI-driven vulnerability detection and remediation platform. The role covers Zero Trust architecture, regulatory compliance, auditability and secure SDLC integration.
Responsibilities:
- Define AI-driven AppSec reference architecture with Checkmarx and CI/CD
- Lead Zero Trust architecture design including IAM, RBAC and ABAC
- Govern LLM-based vulnerability detection and automated remediation
- Conduct AI/ML security risk reviews and compliance mapping
Requirements summary:
- Strong application security experience with SAST, SCA, DAST and API security
- Hands-on experience with Checkmarx, Snyk or Fortify
- Zero Trust and cloud security experience with GCP and Azure
- Knowledge of AI security, prompt injection and LLM risk management
Tools & skills
Source and dates
Source type not verified · zoho
- Employer posting date
- 2026-07-08
- First seen by our source
- 2026-10-11
- Source record updated
- 2026-10-11
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | IT |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Astra North Infoteck Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 426 |
AI Security Solution Architect – Application Security, Zero Trust & AI Governance
Role Summary
• Lead the end-to-end design and governance of an AI-driven vulnerability detection and remediation platform.
• Ensure Zero Trust architecture, regulatory compliance, auditability, and secure SDLC integration.
Required Skills
Application Security
• Application Security (AppSec) including:
• SAST
• SCA
• DAST
• API Security
• Identity and Access Management (IAM)
• Strong experience with:
• Checkmarx
• Snyk
• Fortify
Cloud & Security Architecture
• Zero Trust Architecture (NIST 800-207).
• Cloud security experience with GCP and Azure.
AI Security
• AI security, including:
• Prompt injection protection
• Model abuse prevention
• LLM risk management
DevSecOps & CI/CD
• Experience with CI/CD platforms, including:
• GitHub
• Jenkins
• GitLab
AI / Agentic AI Expectations
• Define agent orchestration strategy using multi-agent architecture and judge models.
• Establish guardrails for AI-driven decisions and suppression workflows.
• Lead Retrieval-Augmented Generation (RAG)-based knowledge integration for secure coding.
Key Responsibilities
Architecture & Security Design
• Define the AI-driven Application Security reference architecture integrating Checkmarx, CI/CD pipelines, and Agentic AI.
• Lead Zero Trust Architecture (ZTA) design, including:
• API Security
• Identity Management
• Role-Based Access Control (RBAC)
• Attribute-Based Access Control (ABAC)
• Define secure SDLC and DevSecOps frameworks.
AI Security & Governance
• Drive LLM-based vulnerability detection and remediation governance.
• Oversee multi-agent decision governance, including LLM judge models and consensus controls.
• Conduct AI/ML security risk reviews covering:
• Model integrity
• Prompt injection
• Data leakage
• Define policies for automated remediation and escalation thresholds.
Risk, Compliance & Audit
• Lead risk assessments and compliance mapping for:
• PCI-DSS
• SOX
• OSFI
• NIST
• Ensure auditability through:
• Trace IDs
• Evidence logs
• SIEM integration
Journal
Only you can see this. Kept on this device, and in your account when you sign in.