Job Description
Company: Att
This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.
Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.
We are seeking an Application Security Architect to secure the design, development, integration, and operation of AI/ML-enabled applications, including LLMs, agent-based systems, RAG pipelines, model-serving APIs, and AI orchestration frameworks, as well as advance the vulnerability management program as it relates to AI based vulnerabilities. This role combines application security architecture with AI security engineering to reduce risk across the full AI lifecycle – from data ingestion and model integration to inference-time protections and production governance – and lead AI Security from a vulnerability management and risk-reduction perspective. This role is primarily focused on identifying, assessing, prioritizing, and helping remediate security weaknesses across AI-enabled applications, services, models, and integration patterns in order to reduce exploitability and accelerate remediation.
The ideal candidate combines strong Application Security expertise with practical experience securing AI/ML systems, LLM-based applications, agentic workflows, and model integrations. This individual should understand both traditional AppSec principles and AI-specific attack patterns and be able to apply that knowledge to improve vulnerability discovery, risk triage, security testing, architecture review, and remediation guidance across the AI lifecycle.
We are looking for a technically minded, hands-on security architect who can evaluate AI implementations for real security risk, define effective controls, partner with engineering teams to remediate issues, and improve how AI-related vulnerabilities are managed across development and production environments. The right candidate will also bring coding aptitude and implementation experience to support secure development workflows, integrate security checks and automation, implement security controls in applications and pipelines, and build practical solutions where necessary to improve coverage, consistency, and speed.
Job Summary
The Application Security Architect is responsible for defining and driving secure-by-design approaches for AI-enabled applications and services. This role focuses on protecting the full lifecycle of AI/ML systems, including:
• LLM-based applications
• Agentic workflows
• Retrieval-augmented generation (RAG)
• Model APIs and inference services
• Training/fine-tuning pipelines
• Third-party AI integrations and SaaS capabilities
The architect will work closely with application teams, enterprise architects, AI/ML engineers, developers, cloud/platform teams, and security stakeholders to establish secure patterns, identify AI-specific risks, implement technical controls, and support responsible adoption of AI capabilities across the organization.
Success in this role requires:
• Deep understanding of application security architecture
• Strong knowledge of AI/ML technologies, frameworks, and deployment models
• Hands-on experience with AI security controls and implementation
• Ability to code, automate, integrate, and validate technical solutions
• Practical familiarity with AI security standards and threat frameworks
• Hands-on familiarity with source control, repository workflows, CI/CD integration, and artifact/package management, including platforms such as GitHub and JFrog
Detailed Job Description:
This role is centered on securing AI-enabled applications and platforms through a combination of application security architecture, AI threat modeling, technical design review, secure implementation guidance, and control validation.
You will help define how AI solutions are securely adopted and deployed, whether they are built in-house, fine-tuned from existing models, or integrated through third-party APIs and enterprise AI platforms. This includes securing AI-related application flows such as:
• Prompt handling
• Model invocation
• Data retrieval and context injection
• Plugin/tool calling
• Agent permissions and action boundaries
• Output validation and post-processing
• API exposure and service-to-service integration
You will assess and mitigate AI-sp
Source: BeBee