Principal Consultant | AI Security (Remote)

Who is Trace3?Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco. Ready to discover the possibilities that live in technology?Come Join Us!Street-Smart- Thriving in Dynamic TimesWe are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.Juice - The “Stuff” it takes to be a Needle Mover We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.Teamwork - Humble, Hungry and SmartWe are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.JOB SUMMARY:The Principal Consultant of AI Security will be responsible for providing architect-level thought leadership and expertise in securing enterprise AI programs, including AI models, applications, agents, data, and the pipelines and platforms they run on. Under the direction of AI Security leadership, the Principal Consultant will lead Trace3’s most complex client engagements in this domain, serve as a senior technical authority for AI security architecture across the Security Solutions practices, and turn that work into the reference architectures, offerings, and enablement that allow Trace3 associates, partners, and regional teams to help clients adopt and scale AI in a secure, resilient, and trustworthy manner.SUMMARY OF ESSENTIAL JOB FUNCTIONS:Lead client engagements as the Subject Matter Expert (SME) across the full range of AI security services, including assessment, strategy, architecture, and design engagements spanning AI models, applications, agents, data, and the pipelines and platforms they run on, from discovery through executive readout.Engage with clients to assess needs and provide strategic, tactical, and operational recommendations that translate AI risk into business terms for CISO-, CIO-, and board-level audiences, and that position security as the enabler of the client’s AI program rather than a constraint on it.Own and evolve the practice’s AI security offerings, and author the reference architectures, standards, and design patterns that allow the Security Solutions practices to deliver one coherent AI security answer to a client rather than several overlapping ones.Collaborate with a multidisciplinary team across Security Solutions (Governance, Risk & Compliance; Identity; Cloud and Application Security; Data Security; Security Operations; Cyber Resiliency), Data & Analytics, Digital Consulting, Innovation, and Service Delivery to scope, design, and deliver programs, solutions, and services engagements that enable secure and responsible AI transformation.Develop and maintain Trace3’s point of view on emerging AI security problems, including trustworthy agents, agent-to-agent trust and delegation, non-human identity, and AI resilience, and contribute that point of view to Trace3’s solution plays and go-to-market initiatives.Develop and deliver enablement for regional solutions architects and sellers, including discovery and qualification guidance for AI security opportunities and delivery playbooks for standardized assessment work, such that AI security can be recognized, opened, and sold by the field without the Principal in every conversation.Foster and contribute to partnerships with AI security and platform vendors, hyperscalers, delivery partners, industry groups, and research institutions, influencing roadmaps, shaping joint offerings, and ensuring client and organizational needs are consistently exceeded.Advocate on behalf of Trace3 on the importance of AI security through speaking engagements, publications, client and partner briefings, and participation at industry events and forums.Provide subject matter expertise with respect to AI security, including staying up to date on the latest threats, techniques, technologies, regulatory requirements, industry standards, frameworks, and best practices, and with the technologies that operationalize AI security controls.Mentor consultants, solutions architects, and interns within the practice and across regions, transferring judgment as well as knowledge, and contributing to Trace3’s leadership and talent development standards.REQUIRED SKILLS AND EXPERIENCE:Bachelor’s degree in computer science, Cybersecurity or equivalent information security, engineering, data science, or like discipline from an accredited college or university, or measurable knowledge / experience from proven industry, military, defense, or government operations.Experience in a customer-facing technology consulting, solutions architecture, or professional services role.10+ years’ experience developing, implementing, and managing Cybersecurity strategies, programs, architectures, technologies, and associated controls.3+ years’ experience securing AI/ML systems in production, including at least two of: model and AI supply chain security, LLM and AI application security, agentic AI or autonomous system security, AI data and pipeline security, or AI red teaming and adversarial testing.Demonstrated ability to design and defend AI security architectures for enterprise environments, including controls for AI agents, non-human identities, delegated access, tool invocation, and constrained action across systems.Subject matter expertise of AI security and Trustworthy AI Principles, Frameworks and Standards including, but not limited to NIST AI RMF, ISO 42001:2023, ISO 5338:2024, OWASP Top 10 for LLM Applications and Agentic Applications, MITRE ATLAS, and CSA AI controls.Subject matter expertise of Cybersecurity Principles, Frameworks and Standards including NIST CSF, CSA CCM, MITRE ATT&CK, and ISO 27001.Working knowledge of AI governance and regulatory requirements (including the EU AI Act and emerging U.S. state and sector requirements) sufficient to partner effectively with Governance, Risk & Compliance on AI risk programs.Working knowledge and hands-on experience with at least one (preferably multiple) major cloud service providers (AWS, GCP, Azure), their AI platforms and services, and their native AI security capabilities.Knowledge and hands-on experience with technologies that operationalize AI security, including but not limited to AI security posture management, LLM gateways and guardrails, AI runtime protection, agent identity and authorization, model registries and AI supply chain controls, and AI-aware data security.Ability to collaborate cross-functionally with software engineers, data scientists, platform teams, and security personnel to assess security risks and requirements throughout the AI development and deployment lifecycle.Certifications including CISSP, CCSP, AIGP, AAISM, or cloud AI/security certifications from at least one major CSP are highly preferred.Prior experience packaging offerings, authoring reference architectures, or running technical enablement or certification programs is highly preferred.Public technical voice, including talks, published research, or open-source contributions in AI security, is highly preferred.Ability to conduct training workshops, assessments, and executive briefings and to develop clear, concise reporting and recommendations.Knowledge and experience creating and maintaining technical documentation, presentations, plans, roadmaps, etc.Strong executive communication skills, including the ability to make complex AI security problems understandable to executives and to defend a recommendation under challenge.Strong interpersonal and communication skills are required.Strong customer presentation skills are required.Motivated self-starter who loves to solve challenging problems and feels comfortable working directly with customers.Highly organized, detail-oriented, excellent time management skills and able to effectively prioritize tasks in a fast-paced, high-volume, and evolving work environment.Comfortable managing multiple and changing priorities, and meeting deadlines in an entrepreneurial environment.Ability to travel when needed (approximately 25–35%); holds a valid driver’s license.Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.Estimated Pay Range$190,000—$250,000 USDThe PerksComprehensive medical, dental and vision plans for you and your dependents401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term DisabilityCompetitive CompensationTraining and development programsMajor offices stocked with snacks and beveragesCollaborative and cool cultureWork-life balance and generous paid time offOur CommitmentAt the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.We’re committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.As an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.If you require a reasonable accommodation to complete the application process or participate in an interview, please email View email address on click.appcast.io.***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.