Principal Consultant | AI Security (Remote)

We need to output HTML fragment with sections: About the role? Actually the posting includes "Who is Trace3?" then description of company, then "Street-Smart - Thriving in Dynamic Times", "Juice - The “Stuff” it takes to be a Needle Mover", "Teamwork - Humble, Hungry and Smart". Those are likely company values. Then JOB SUMMARY, SUMMARY OF ESSENTIAL JOB FUNCTIONS, REQUIRED SKILLS AND EXPERIENCE, then pay range, then The Perks (benefits), then Our Commitment (EEO etc). We need to remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. So we should remove "Our Commitment" section (EEO) and the accommodation line etc. Also remove "If you require a reasonable accommodation..." and the recruitment agency note. Also remove duplicated lines? Not many. We need to use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. However we should only include sections that have real specific content. The posting includes: JOB SUMMARY (could be About the role). SUMMARY OF ESSENTIAL JOB FUNCTIONS (Responsibilities). REQUIRED SKILLS AND EXPERIENCE (Requirements/Qualifications/Skills). Pay: Estimated Pay Range. Benefits: The Perks. Schedule? Not mentioned except travel 25-35% maybe schedule? Not explicit schedule like full-time, part-time. Could omit Schedule section if not present. Also we might have About the role (company overview) maybe separate from job summary. The instruction: "Use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we can choose appropriate headings based on content. We need to avoid repeating job title as heading. Also we should not include headings with filler. Thus we will produce sections: - About the role: maybe combine company overview and job summary? Could be "About the role" includes job summary and maybe company description? But we have separate "Who is Trace3?" which is company overview. Could be "About the role" includes job summary and maybe company description? However they said "About the role" as example heading; we can use that for job summary. The company overview could be omitted? But we need to preserve ALL substantive information; we cannot drop company overview. Where to put it? Could be a preceding

before sections, not a heading. The instruction: "Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it." So we can include a short paragraph about Trace3 before sections. That's fine. Thus output:

Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate. Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it! Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco. Ready to discover the possibilities that live in technology? Come Join Us!

Then maybe a paragraph about values? The "Street-Smart", "Juice", "Teamwork" are values. Could be included as a paragraph or maybe as a list? Could be a

of values. But they are not duties/requirements/benefits; they are cultural attributes. Could be a

describing them. We'll keep as a paragraph. Then sections:

About the role

JOB SUMMARY: The Principal Consultant of AI Security will be responsible for providing architect-level thought leadership and expertise in securing enterprise AI programs, including AI models, applications, agents, data, and the pipelines and platforms they run on. Under the direction of AI Security leadership, the Principal Consultant will lead Trace3’s most complex client engagements in this domain, serve as a senior technical authority for AI security architecture across the Security Solutions practices, and turn that work into the reference architectures, offerings, and enablement that allow Trace3 associates, partners, and regional teams to help clients adopt and scale AI in a secure, resilient, and trustworthy manner.

Responsibilities

• Lead client engagements as the Subject Matter Expert (SME) across the full range of AI security services, including assessment, strategy, architecture, and design engagements spanning AI models, applications, agents, data, and the pipelines and platforms they run on, from discovery through executive readout.
• Engage with clients to assess needs and provide strategic, tactical, and operational recommendations that translate AI risk into business terms for CISO-, CIO-, and board-level audiences, and that position security as the enabler of the client’s AI program rather than a constraint on it.
• Own and evolve the practice’s AI security offerings, and author the reference architectures, standards, and design patterns that allow the Security Solutions practices to deliver one coherent AI security answer to a client rather than several overlapping ones.
• Collaborate with a multidisciplinary team across Security Solutions (Governance, Risk & Compliance; Identity; Cloud and Application Security; Data Security; Security Operations; Cyber Resiliency), Data & Analytics, Digital Consulting, Innovation, and Service Delivery to scope, design, and deliver programs, solutions, and services engagements that enable secure and responsible AI transformation.
• Develop and maintain Trace3’s point of view on emerging AI security problems, including trustworthy agents, agent-to-agent trust and delegation, non-human identity, and AI resilience, and contribute that point of view to Trace3’s solution plays and go-to-market initiatives.
• Develop and deliver enablement for regional solutions architects and sellers, including discovery and qualification guidance for AI security opportunities and delivery playbooks for standardized assessment work, such that AI security can be recognized, opened, and sold by the field without the Principal in every conversation.
• Foster and contribute to partnerships with AI security and platform vendors, hyperscalers, delivery partners, industry groups, and research institutions, influencing roadmaps, shaping joint offerings, and ensuring client and organizational needs are consistently exceeded.
• Advocate on behalf of Trace3 on the importance of AI security through speaking engagements, publications, client and partner briefings, and participation at industry events and forums.
• Provide subject matter expertise with respect to AI security, including staying up to date on the latest threats, techniques, technologies, regulatory requirements, industry standards, frameworks, and best practices, and with the technologies that operationalize AI security controls.
• Mentor consultants, solutions architects, and interns within the practice and across regions, transferring judgment as well as knowledge, and contributing to Trace3’s leadership and talent development standards.

Requirements

REQUIRED SKILLS AND EXPERIENCE:

• Bachelor’s degree in computer science, Cybersecurity or equivalent information security, engineering, data science, or like discipline from an accredited college or university, or measurable knowledge / experience from proven industry, military, defense, or government operations.
• Experience in a customer-facing technology consulting, solutions architecture, or professional services role.
• 10+ years’ experience developing, implementing, and managing Cybersecurity strategies, programs, architectures, technologies, and associated controls.
• 3+ years’ experience securing AI/ML systems in production, including at least two of: model and AI supply chain security, LLM and AI application security, agentic AI or autonomous system security, AI data and pipeline security, or AI red teaming and adversarial testing.
• Demonstrated ability to design and defend AI security architectures for enterprise environments, including controls for AI agents, non-human identities, delegated access, tool invocation, and constrained action across systems.
• Subject matter expertise of AI security and Trustworthy AI Principles, Frameworks and Standards including, but not limited to NIST AI RMF, ISO 42001:2023, ISO 5338:2024, OWASP Top 10 for LLM Applications and Agentic Applications, MITRE ATLAS, and CSA AI controls.
• Subject matter expertise of Cybersecurity Principles, Frameworks and Standards including NIST CSF, CSA CCM, MITRE ATT&CK, and ISO 27001.
• Working knowledge of AI governance and regulatory requirements (including the EU AI Act and emerging U.S. state and sector requirements) sufficient to partner effectively with Governance, Risk & Compliance on AI risk programs.
• Working knowledge and hands-on experience with at least one (preferably multiple) major cloud service providers (AWS, GCP, Azure), their AI platforms and services, and their native AI security capabilities.
• Knowledge and hands-on experience with technologies that operationalize AI security, including but not limited to AI security posture management, LLM gateways and guardrails, AI runtime protection, agent identity and authorization, model registries and AI supply chain controls, and AI-aware data security.
• Ability to collaborate cross-functionally with software engineers, data scientists, platform teams, and security personnel to assess security risks and requirements throughout the AI development and deployment lifecycle.
• Certifications including CISSP, CCSP, AIGP, AAISM, or cloud AI/security certifications from at least one major CSP are highly preferred.
• Prior experience packaging offerings, authoring reference architectures, or running technical enablement or certification programs is highly preferred.
• Public technical voice, including talks, published research, or open-source contributions in AI security, is highly preferred.
• Ability to conduct training workshops, assessments, and executive briefings and to develop clear, concise reporting and recommendations.
• Knowledge and experience creating and maintaining technical documentation, presentations, plans, roadmaps, etc.
• Strong executive communication skills, including the ability to make complex AI security problems understandable to executives and to defend a recommendation under challenge.
• Strong interpersonal and communication skills are required.
• Strong customer presentation skills are required.
• Motivated self-starter who loves to solve challenging problems and feels comfortable working directly with customers.
• Highly organized, detail-oriented, excellent time management skills and able to effectively prioritize tasks in a fast-paced, high-volume, and evolving work environment.
• Comfortable managing multiple and changing priorities, and meeting deadlines in an entrepreneurial environment.
• Ability to travel when needed (approximately 25–35%); holds a valid driver’s license.

Pay

Estimated Pay Range: $190,000 USD - $250,000 USD

Benefits

• Comprehensive medical, dental and vision plans for you and your dependents
• 401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability
• Competitive Compensation
• Training and development programs
• Major offices stocked with snacks and beverages
• Collaborative and cool culture
• Work-life balance and generous paid time off
We should not include Schedule section as not present. We also need to include the values paragraph maybe after company overview. Let's add a paragraph