
AI Security Architect – Application Security, Zero Trust & AI Governance
Astra-North Infoteck · Toronto, Ontario, Canada
Weak hiring record · median 81 days open
All reasons
- Open 116 days
- 61% of this employer's openings are over 60 days old
In its favour
- Still listed on the employer's own board
AI Security Solution Architect – Application Security, Zero Trust & AI Governance
Role Summary
- Lead the end-to-end design and governance of an AI-driven vulnerability detection and remediation platform.
- Ensure Zero Trust architecture, regulatory compliance, auditability, and secure SDLC integration.
Required Skills
Application Security
Application Security (AppSec) including
- SAST
- SCA
- DAST
- API Security
- Identity and Access Management (IAM)
Strong experience with
- Checkmarx
- Snyk
- Fortify
Cloud & Security Architecture
- Zero Trust Architecture (NIST 800-207).
- Cloud security experience with GCP and Azure.
AI Security
AI security, including
- Prompt injection protection
- Model abuse prevention
- LLM risk management
DevSecOps & CI/CD
Experience with CI/CD platforms, including
- GitHub
- Jenkins
- GitLab
AI / Agentic AI Expectations
- Define agent orchestration strategy using multi-agent architecture and judge models.
- Establish guardrails for AI-driven decisions and suppression workflows.
- Lead Retrieval-Augmented Generation (RAG)-based knowledge integration for secure coding.
Key Responsibilities
Architecture & Security Design
- Define the AI-driven Application Security reference architecture integrating Checkmarx, CI/CD pipelines, and Agentic AI.
Lead Zero Trust Architecture (ZTA) design, including
- API Security
- Identity Management
- Role-Based Access Control (RBAC)
- Attribute-Based Access Control (ABAC)
- Define secure SDLC and DevSecOps frameworks.
AI Security & Governance
- Drive LLM-based vulnerability detection and remediation governance.
- Oversee multi-agent decision governance, including LLM judge models and consensus controls.
Conduct AI/ML security risk reviews covering
- Model integrity
- Prompt injection
- Data leakage
- Define policies for automated remediation and escalation thresholds.
Risk, Compliance & Audit
Lead risk assessments and compliance mapping for
- PCI-DSS
- SOX
- OSFI
- NIST
Ensure auditability through
- Trace IDs
- Evidence logs
- SIEM integration
Skills
More jobs at Astra-North Infoteck
All 314- Bilingual IVR Automation testerAstra-North Infoteck · Toronto, Ontario, Canada3d ago
- Microsoft Dynamics 365 DeveloperAstra-North Infoteck · Montreal, Quebec, Canada5d ago
- Data Business Analyst - PL/SQL, T-SQL & Data WarehousingAstra-North Infoteck · Toronto, Ontario, Canada5d ago
- Senior Angular Developer – Angular 12+, TypeScript & RxJSAstra-North Infoteck · Montreal, Quebec, Canada5d ago
- Bilingual English & Spanish Java Backend DeveloperAstra-North Infoteck · Scarborough, Ontario, Canada5d ago
Similar roles
- Senior Security Engineer IIBraze · Toronto · USD 153,000–240,500/yrtoday
- Senior Security Engineer, Enterprise SecurityBraze · Toronto · USD 133,000–209,000/yrtoday
- Application Security ResearcherOX Security · Toronto, ON, Canadayesterday
- Information Security AnalystFil · Toronto Office · USD 107,000–113,000/yryesterday
- Senior Security EngineerCohere · Toronto2d ago
- Principal SAP Security AnalystHasbro · Canada2d ago