AI Security Architect

Location: Lisbon, Lisbon, pt

Job Description

We are seeking an experienced AI Security Architect to lead the security assessment, governance, and design of Artificial Intelligence and Generative AI solutions across their full lifecycle, from concept and development through to deployment and ongoing operations.

Key Responsibilities

• Provide security guidance and oversight for AI and GenAI initiatives throughout design, development, and production phases.
• Establish security standards and technical requirements for AI platforms, APIs, intelligent agents, integrations, and supporting services.
• Conduct security architecture assessments, threat modelling exercises, and solution reviews to identify and address potential vulnerabilities.
• Ensure AI implementations comply with security, privacy, audit, and regulatory requirements.
• Design and promote secure adoption practices for AI technologies, including governance frameworks and risk management approaches.
• Support the implementation of robust monitoring, logging, and audit capabilities to ensure transparency and accountability.

Risk Management & Security Oversight

The successful candidate will help identify, assess, and mitigate risks associated with:

• Prompt manipulation attacks and attempts to bypass model safeguards.
• Unauthorized disclosure of sensitive or confidential information.
• Excessive system permissions or unsafe use of autonomous agents and tools.
• Uncontrolled or abusive consumption of AI services and resources.
• Vulnerable integrations, compromised data sources, or untrusted inputs.
• Handling of personal, confidential, or regulated information within AI workflows.
• Validation and effectiveness of security controls through monitoring and audit processes.

Required Experience

• Strong background in Cybersecurity, Security Architecture, Application Security, Product Security, Cloud Security, or related disciplines.
• Understanding of security risks and governance challenges associated with Large Language Models (LLMs) and Generative AI technologies.
• Experience performing architecture reviews, threat modelling activities, and security assessments.
• Solid knowledge of Identity and Access Management (IAM), API Security, Secrets Management, Logging, Monitoring, and Security Control Validation.
• Familiarity with data protection principles, privacy regulations, and secure handling of sensitive information.
• Ability to critically evaluate technical implementations and verify compliance with security requirements.

Preferred Qualifications

• Experience working with AWS and/or Microsoft Azure environments.
• Exposure to AI platforms such as AWS Bedrock, Azure OpenAI, Azure AI Foundry, or similar technologies.
• Knowledge of:
  • AI safety mechanisms and content control frameworks.
  • Least-privilege access models and identity governance.
  • Observability, auditability, and operational monitoring practices.
  • Data governance and sensitive data protection strategies.
• Familiarity with Databricks security concepts, including:
  • Access management and permission models.
  • Workspaces, pipelines, notebooks, and job execution.
  • Secret management, networking, and data governance controls.
• Understanding of current AI security frameworks, standards, and emerging risk models.
• Experience working within DevSecOps and/or MLOps environments.

Core Competencies

• Ability to translate security and AI-related risks into practical technical requirements.
• Strong analytical, risk assessment, and decision-making capabilities.
• Confidence in challenging and validating technical solutions where required.
• Excellent collaboration skills across Security, Engineering, Product, and Data teams.
• Focus on implementing security controls that are practical, measurable, enforceable, and auditable.

Additional Information

At Tieto, we believe in the power of diversity, equity, and inclusion. We encourage applicants of all backgrounds, genders (m/f/d), and walks of life to join our team, as we believe that this fosters an inspiring workplace and fuels innovation. Our commitment to openness, trust, and diversity is at the heart of our mission to create digital futures that benefit businesses, societies, and humanity.
Diversity, equity and inclusion | Sustainability | Tieto

Stay alert to recruitment scams:
• Tieto only communicates via @tieto.com email addresses.
• We never ask candidates to pay fees or share financial details during recruitment.
• If you receive a suspicious message claiming to be from Tieto, don't respond — verify it via our official careers site.
• For more information visit Important Advisory Regarding Recruitment Fraud | Tieto Blog