AI security engineer

Описания нет

• Embed Security by Design across AI use cases, agents, and platform integrations.
• Implement and promote security controls for access management, secrets management, logging, monitoring, sandboxing, tool restrictions, API restrictions, and external integrations.
• Translate group security policies and architecture principles into practical controls, reusable patterns, and guidance for AI teams.
• Ensure alignment with risk, supplier, third-party, and operational security requirements.
• Prepare security-gate evidence and support security review processes.
• Drive remediation activities resulting from security reviews and assessments.
• Escalate unresolved control gaps, deviations, and delivery risks when required.
• Address AI-specific security risks, including Prompt Injection, Data Leakage, insecure tool usage, excessive permissions, and weak auditability.
• Support secure implementation and due diligence activities for external AI vendors, models, orchestration components, and APIs.
• Ensure appropriate safeguards for data protection and data segregation.
• Strengthen AI incident readiness through detection capabilities, logging strategies, response scenarios, playbooks, and exercises.
• Collaborate closely with SOC teams and central security functions.
• Help scale secure AI delivery through reusable security patterns and continuous improvement initiatives.
• Contribute to the evolution of the group-wide security model by sharing lessons learned and best practices.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Fluent (mandatory)
• 7+ years of experience in IT and Cyber Security
• Experience in transformation, digital, or platform environments
• Strong background in Cloud Security, Identity & Access Management (IAM), Application Security, and Secure SDLC
• Working knowledge of AI/ML and Agentic AI Security.
• Knowledge of Prompt Injection, Data Leakage, Agent Identity, Tool-Use Risk, and Model Supply Chain risks.
• Familiarity with OWASP LLM Top 10, MITRE ATLAS, and NIST AI Risk Management Framework (AI RMF).
• Experience with Threat Modeling, Risk Assessment, and Security Architecture for distributed systems.
• Strong stakeholder management skills and ability to influence teams without direct authority.
• Ability to challenge solution designs constructively and drive secure outcomes.
• Pragmatic, delivery-oriented, and comfortable working in ambiguous environments.
• Будет плюсом: Additional European languages are a plus; Previous security responsibility within multi-country, federated environments; Experience in industries such as Logistics, Retail, or Financial Services; Hands-on exposure to LLM and Agent platforms such as Azure AI, Anthropic, OpenAI, Vertex AI, or LangChain; Experience with MLOps tooling; CISSP, CISM, or equivalent certifications; Experience contributing to or leading AI Red Teaming exercises

• Условий в вакансии нет