AI security engineer

At Amgen, Technology isn’t just a support function—it’s a catalyst for discovery, transformation, and real-world impact. Here, your ideas fuel innovation that improves and saves the lives of patients in need of our medicines. Are you ready to do meaningful work that matters? As an AI Security Engineer, you’ll work at the intersection of cybersecurity, artificial intelligence, data, and biotechnology. You will help build and operate the security capabilities that enable Amgen teams to develop and deploy AI safely at enterprise scale.

• Design and implement AI security controls for AI/ML applications, platforms, models, APIs, agents, and supporting infrastructure.
• Deploy security tooling and automation, primarily using AWS cloud infrastructure and APIs, to integrate AI security testing and controls into engineering workflows.
• Integrate security into MLOps, LLMOps, DevSecOps, and CI/CD pipelines, enabling automated security validation throughout the AI development lifecycle.
• Threat model AI systems and applications, translating identified risks into practical engineering requirements, mitigations, tests, and security controls.
• Secure generative AI and agentic AI systems, including model endpoints, retrieval-augmented generation (RAG), vector databases, tools, agent workflows, identity boundaries, and external integrations.
• Evaluate and integrate AI security technologies, including capabilities for AI runtime protection, model and application testing, data protection, observability, and AI security posture management.
• Implement security controls for cloud-based AI platforms and services across enterprise cloud environments.
• Secure containerized AI workloads running on technologies such as Docker and Kubernetes, including workload identity, secrets management, network controls, runtime security, and policy enforcement.
• Implement infrastructure and security controls as code using technologies such as Terraform, cloud-native infrastructure-as-code tooling, or similar technologies.
• Partner with AI and platform engineering teams to investigate threats, develop mitigations, and drive identified security issues through remediation.
• Support security reviews of AI systems and provide actionable engineering recommendations and practical solutions.
• Deploy monitoring and detection capabilities for security-relevant AI activity, misuse patterns, anomalous behavior, and emerging attack techniques.
• Build AI security standards and technical guidance, translating security, regulatory, and risk requirements into implementable technical controls.
• Share technical knowledge across cybersecurity and engineering teams and contribute to the continued development of Amgen’s AI security capabilities.

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, Information Technology, or a related technical field, or equivalent practical experience.
• 5+ years of hands-on experience in cybersecurity, security engineering, application security, cloud security, or a related technical discipline, with experience securing modern cloud-based applications and platforms.
• Strong programming or scripting skills, with the ability to build security tooling, automation, integrations, and proof-of-concept implementations.
• Strong understanding of application security fundamentals, including authentication and authorization, API security, secrets management, cryptography, input/output validation, software supply chain security, and common application vulnerabilities.
• Hands-on experience with cloud-native technologies, preferably in AWS.
• Practical knowledge of threat modeling and security testing, with the ability to translate identified risks into technical mitigations and security controls.
• Understanding of AI/ML systems and the AI development lifecycle, including model training, inference, APIs, data pipelines, and MLOps/LLMOps.
• Familiarity with security risks associated with large language models and generative AI, including prompt injection, sensitive information disclosure, insecure output handling, excessive agency, model and data supply chain risks, and insecure tool integrations.
• Familiarity with AI agents, RAG architectures, vector databases, embeddings, model APIs, and AI application frameworks.
• Experience designing, developing, and automating agentic AI workflows and pipelines, including multi-step and tool-enabled agent architectures, using platforms and frameworks such as n8n, Databricks Agent Bricks, Amazon Bedrock Agents, or similar technologies.
• Ability to operate effectively in a fast-paced and rapidly evolving AI environment, managing competing demands, adapting quickly to changing priorities, and maintaining high-quality outcomes under time pressure.
• Familiarity with AI-focused security frameworks and guidance such as the OWASP guidance for LLM and GenAI applications, MITRE ATLAS, and NIST AI Risk Management Framework.
• Fluency in English
• Будет плюсом: Experience with AI/ML development frameworks such as PyTorch, TensorFlow, Hugging Face, LangChain, or similar technologies is a plus; Experience with MLOps and AI platforms such as MLflow, SageMaker, or equivalent platforms is a plus; Understanding of data protection techniques, including encryption, data classification, DLP, anonymization, tokenization, and privacy-enhancing technologies; Familiarity with regulated environments and requirements such as GxP, GDPR, the EU AI Act, and HIPAA is beneficial; deep regulatory expertise is not required; Ability to communicate complex AI security issues clearly and translate them into practical engineering actions; Relevant security certifications such as CISSP, CCSP, cloud security certifications, or AI security certifications are a plus but not required

• Domestic and international travel up to 10%.
• Work That Matters – Build security capabilities that enable scientific breakthroughs and help patients worldwide.
• Modern Tech Stack – Work with cloud-native technologies, automation, AI/ML platforms, generative AI, and emerging security technologies.
• Hands-on AI Security – Work directly on emerging AI security challenges and help shape security capabilities as the technology evolves.
• Global Scale, Agile Mindset – Collaborate across continents while working in nimble, high-impact teams.
• Continuous Learning – Access certifications, training, mentorship, and career mobility.
• Amgen Total Rewards Plan – Comprehensive benefits in healthcare, finance, and well-being.
• Flexibility – Hybrid work model with time split between our Lisbon office and remote work.