AI Security Associate Architect

Join Thomson Reuters as an AI Security Associate Architect, where you will embed security across our products, platforms, and enterprise systems. You will work with business and technical teams to create secure-by-design architectures and secure-by-default configurations. Your role will involve providing technical leadership, assessing risks, recommending controls, and leading architecture reviews. You will also build relationships across teams, mentor engineers, and improve our architecture review methods and knowledge base.

• Collaborer avec les équipes commerciales et techniques pour rendre les architectures sécurisées par conception et les configurations sécurisées par défaut pratiques, cohérentes et évolutives.
• Fournir un leadership technique au sein de l'organisation, en établissant des relations de confiance et en mentorant les ingénieurs.
• Évaluer les risques technologiques en tenant compte des menaces et des technologies évolutives, et traduire les meilleures pratiques de l'industrie en recommandations concrètes.

• Experience translating security frameworks, standards, and applicable regulatory requirements into controls, assessment methods, and practical engineering guidance
• Working knowledge of AI and agentic system security, including prompt injection, model and data integrity, and controls for agent and tool use
• Passionate about security, with the curiosity to explore unfamiliar technologies and translate ideas into practical solutions
• Strong understanding of cryptography concepts and key management, authentication and authorization, identity federation, network and operating system security, data protection, and detection and response at the system level, network layer or application layer
• Ability to read and discuss infrastructure configurations, validate design assumptions, and guide secure implementation
• Bachelor's degree in computer science, or equivalent practical experience
• Ability to develop security requirements, reusable design patterns, and reference architectures, and guide their adoption
• Strong analytical skills and sound judgment when balancing security risks, engineering constraints, and business needs
• Hands-on experience and deep understanding of at least one major cloud provider (AWS, Azure, or GCP), including identity and access management, networking, and shared platform services
• Passionate about sharing knowledge across teams, the broader security community and to mentoring others
• Experience designing and implementing secure applications, APIs, and container platforms, with knowledge of Kubernetes and secure CI/CD practices
• Experience leading security architecture reviews, threat modelling, and risk assessments across multiple products or platforms, and translating findings into prioritized engineering actions
• Exceptional written and verbal communication skills, with the ability to explain complex security concepts and build alignment across technical and business stakeholders
• 10+ years of hands-on experience in security architecture, software engineering, application security, or cloud security
• Relevant industry certifications such as CISSP, CCSP, CISM, GIAC, AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Professional Cloud Security Engineer
• Experience designing and securing enterprise-scale multi-cloud environments across AWS, Azure, and/or GCP
• Experience developing and scaling security architecture standards, cloud guardrails, reusable design patterns, and reference implementations across enterprise engineering teams
• Experience with security architecture for AI, generative AI, large language models, or agentic systems, including model governance, data protection, and secure tool integration