Senior AI Architect - Cybersecurity
Come join us to create what’s next. Let’s define tomorrow, together.
Description
United's Digital Technology team is comprised of many talented individuals all working together with cutting-edge technology to build the best airline in the history of aviation. Our team designs, develops and maintains massively scaling technology solutions brought to life with innovative architectures, data analytics, and digital solutions.
Job Overview and Responsibilities
The Senior Architect – AI security supports efforts to mature AI security capabilities for United Airlines. You will be part of a cross-disciplinary Cyber team responsible for advancing enterprise security capabilities by integrating AI-driven innovation with modern cloud and Zero Trust architectures. In this role, the Architect will focus on designing secure and governed AI implementations across domains including identity, application, cloud, and security operations – partnering with IT, Product, and Engineering teams to ensure AI-driven tools and use cases operate accurately, securely, and safely across the enterprise. This role plays a key part in shaping scalable, secure, and compliant architectures that enable responsible AI adoption, enhance operational efficiency, and strengthen overall cyber resilience.
- Design and implement AI security controls across enterprise AI use cases, applications, and platforms to ensure secure, governed, and responsible adoption of AI capabilities.
- Define and operationalize controls for enterprise AI usage, including AI security gateways, policy enforcement, usage monitoring, and guardrails to mitigate risks such as prompt injection, data leakage, shadow AI, unauthorized AI usage, and model misuse.
- Architect and support SASE/SSE frameworks and Zero Trust Network Access solutions to enable secure, identity-driven access to enterprise applications, internet resources, and approved AI tools and services.
- Establish secure integration patterns for AI implementations with enterprise systems, including identity providers, SIEM, CI/CD pipelines, data protection platforms, and security monitoring capabilities.
- Lead threat modeling, architecture reviews, and security-by-design assessments for AI-enabled applications, cloud services, enterprise platforms, and AI use cases.
- Implement DLP strategies, context-aware access controls, and data protection requirements to prevent unauthorized data exposure and enforce least-privilege access across AI and cloud environments.
Partner with engineering, product, risk, and cybersecurity teams to embed AI security requirements, governance standards, playbooks, and continuous improvement practices across the AI adoption lifecycle.
This position is offered on local terms and conditions. Expatriate assignments and sponsorship for employment visas, even on a time-limited visa status, will not be awarded. This position is for United Airlines Business Services Pvt. Ltd - a wholly owned subsidiary of United Airlines Inc.
Qualifications
What’s needed to succeed (Minimum Qualifications):
- Bachelor's degree
- 6+ years of technical experience directly related to Cybersecurity domains.
- 1-2 + years working with AI/ML/LLM-based systems or securing AI applications
- Experience defining or implementing security controls across cloud, application, identity, data protection, or governance domains.
- Strong understanding of AI/ML/LLM technologies, enterprise AI use cases, and associated security risks across the AI adoption lifecycle.
- Experience with AI security risks such as prompt injection, data leakage, data poisoning, model misuse, unsafe outputs, shadow AI, and unauthorized AI usage.
- Knowledge of AI security governance practices, including control definition, policy enforcement, usage monitoring, risk assessment, and guardrail implementation.
- Deep knowledge of IAM, Application Security, Cloud Security, Data Protection, GRC, and Security Operations domains.
- Strong expertise in Zero Trust principles, modern access models, and identity-driven security architectures.
- Strong understanding of SASE, SSE, ZTNA, secure web access, cloud access security, and data protection architectures.
- Ability to evaluate and manage enterprise AI security controls and platforms that support AI usage governance, data loss prevention, access control, monitoring, and policy enforcement.
- Ability to conduct security architecture reviews, threat modeling, and security-by-design assessments for AI-enabled applications, cloud services, and enterprise platforms.
- Ability to translate AI security risks into practical controls, standards, playbooks, and business-aligned guidance.
- Ability to collaborate across cybersecurity, engineering, product, privacy, risk, legal, and governance stakeholders.
- Ability to work independently and self-motivate.
- Excellent problem solving, critical thinking, interpersonal, collaboration, written and verbal communication skills.
What will help you propel from the pack (Preferred Qualifications):
- Master's degree
- 8+ years of technical experience in cyber security domains, 5+ years hands-on experience writing production level code preferably in Python, Go or JavaScript.
- Experience supporting security reviews, architecture assessments, or threat modeling for AI-enabled applications and cloud services.
- Experience with AI security controls such as AI usage monitoring, policy enforcement, data loss prevention, access controls, prompt injection mitigation, and shadow AI risk management.
- CISSP / CCSP / ISSAP / ISSEP
- CISM, CRISC, CEH, GIAC
- Knowledge of AI security and governance standards such as OWASP Top 10 for LLM Applications, NIST AI RMF, ISO/IEC 42001, and MITRE ATLAS