security engineer

SoftServe provides IT services and consulting, helping organizations adopt AI technologies securely across business and technology environments.

• Define and lead the enterprise AI security strategy, aligning priorities with business goals and technology direction;
• Own end-to-end security assessments of AI platforms, LLMs, copilots, and third-party services to reduce adoption risks and enable secure rollout;
• Collaborate with engineering, architecture, legal, and privacy teams to embed security-by-design into AI solutions and development workflows;
• Design and implement security controls, guardrails, and governance for Generative AI, covering identity, data protection, APIs, and monitoring;
• Conduct threat modeling, security reviews, and risk assessments addressing prompt injection, data leakage, and AI supply chain risks;
• Review AI system architectures across cloud, on-premises, and hybrid environments and provide actionable security recommendations;
• Develop AI security standards, reference architectures, and implementation guidance for enterprise-wide adoption;
• Represent the organization in customer security discussions, audits, and AI due diligence, showcasing security practices and capabilities.

• Proven experience in security architecture with a focus on cybersecurity, application, or cloud security;
• Strong knowledge of AI technologies, including LLMs, RAG, AI agents, vector databases, and model APIs;
• Hands-on experience assessing AI platforms such as Azure OpenAI, OpenAI, Copilot, Anthropic Claude, Google Gemini, or AWS Bedrock;
• Deep understanding of AI-specific risks, including prompt injection, jailbreaks, data exposure, and model misuse;
• Experience designing security controls across IAM, API security, data protection, and monitoring in cloud environments;
• Strong expertise in Azure, AWS, or Google Cloud security principles;
• Strong communication, analytical thinking, and stakeholder management skills;
• Upper-intermediate English level or higher;
• Nice to have: Familiarity with NIST AI RMF, OWASP Top 10 for LLMs, MITRE ATLAS, or ISO 42001; proficiency in Python, PowerShell, or scripting for automation.

• No conditions specified