Security Architect – DevSecOps, Blockchain & AI

About the role

We are looking for an experienced Security Architect with a DevSecOps mindset to lead security architecture, automation, and operational security for a blockchain‑powered AI platform. You will embed security across the full software development lifecycle, from CI/CD pipelines to AI model deployment and cloud‑native workloads.

Key responsibilities

• Design and implement DevSecOps frameworks, integrating SAST, DAST, dependency scanning, SBOM generation and container scanning into CI/CD pipelines.
• Secure blockchain infrastructure, including node hardening, HSM‑based key management, consensus protection and smart‑contract security reviews.
• Develop security controls for agentic AI systems, mitigating prompt injection, model manipulation and privilege escalation.
• Architect cloud‑native security on AWS, harden Kubernetes clusters, enforce zero‑trust, IAM least‑privilege and secrets management.
• Build monitoring dashboards with Prometheus and Grafana, create incident‑response playbooks, and conduct threat modeling, penetration testing and regular assessments.
• Collaborate with AI engineers, blockchain architects, DevOps teams and product leadership to embed security throughout the platform lifecycle.

Required profile

• Proven experience as a Security Architect or senior security engineer with a strong DevSecOps background.
• Deep knowledge of blockchain node security, smart‑contract auditing and key management.
• Hands‑on expertise securing AI/ML pipelines, autonomous agents and model deployment environments.
• Extensive experience with AWS, Kubernetes, zero‑trust architectures and security automation.
• Strong analytical skills for threat modeling, incident response and security assessments.

Required skills

• DevSecOps
• CI/CD pipelines
• SAST / DAST
• SBOM generation
• Container scanning
• HSM key management
• Blockchain security
• Smart‑contract auditing
• AI model security
• Prompt injection mitigation
• AWS
• Kubernetes
• Prometheus
• Grafana
• Zero‑trust architecture
• IAM least‑privilege
• Secrets management
• Incident response
• Threat modeling
• Penetration testing