AI Security Architect Lead

Join GitLab as a Staff AI Product Security Architect and play a pivotal role in securing the future of AI-powered DevSecOps. As a senior technical leader within our Security Platforms & Architecture Team, you will design and implement robust security architectures for AI integrations across our platform, including multi-agent collaboration and AI-driven developer experiences. This remote role offers the opportunity to influence industry standards, collaborate cross-functionally, and shape security practices for millions of developers worldwide.

Job Overview

• Lead the design and implementation of scalable security architectures for AI-powered systems.
• Establish secure-by-design principles for AI integrations and agent platforms.
• Work at the intersection of AI innovation and security excellence, impacting product development and industry standards.
• Partner with Product, Engineering, and Security teams to deliver practical solutions for complex AI security challenges.
• Contribute to thought leadership in AI security for DevSecOps platforms.

Key Responsibilities

• Design secure architectures for AI integrations, agent security, and workflow validation.
• Conduct threat modeling and risk assessments for AI features and multi-agent orchestration.
• Develop and document security standards for AI model integration and agent communication.
• Advise engineering teams on AI security architecture and trade-offs.
• Stay updated on AI security threats and best practices, integrating findings into architecture improvements.
• Collaborate with legal and compliance teams to ensure regulatory alignment (EU AI Act, NIST AI RMF, data privacy).
• Mentor engineers and team members on AI security principles.

Required Skills & Qualifications

• 8+ years in security architecture or application security, with expertise in AI/ML systems.
• Deep understanding of AI system architectures and security vulnerabilities.
• Proven experience in threat modeling and distributed systems security.
• Strong knowledge of secure software development lifecycle and DevSecOps methodologies.
• Ability to communicate complex security concepts to technical and non-technical audiences.
• Hands-on experience with AI frameworks, agent architectures, and orchestration platforms.
• Programming skills in Python and familiarity with AI workflows.
• Knowledge of regulatory compliance frameworks for AI systems.
• Security certifications (CISSP, CCSP, or similar) preferred.
• Background in software engineering and distributed systems is a plus.