Security Engineer – AI & Emerging Technologies
Location: London (2 days in the office)
(Sponsorship not provided)
About the Role
We are seeking a Security Engineer to help enable the safe adoption of artificial intelligence and emerging technologies across the organisation. This role partners with technology, engineering, and business teams to embed security into AI initiatives from concept through deployment, ensuring innovative solutions are delivered with appropriate safeguards and risk management.
The successful candidate will provide practical security advice across AI platforms, cloud services, internally developed applications, automation initiatives, and third-party technologies. Working as part of the Information Security function, you will help shape secure architecture, assess risk, and establish security standards that support responsible innovation.
This position is ideal for someone who enjoys solving complex technical challenges, influencing secure design decisions, and staying ahead of evolving threats associated with modern AI technologies.
Key Responsibilities
- Provide security consultation for AI-enabled projects, cloud services, business applications, and emerging technology initiatives.
- Perform security architecture reviews for new solutions, ensuring alignment with organisational security standards and best practice.
- Evaluate the security posture of external AI services, software vendors, and technology platforms before adoption.
- Conduct security risk assessments throughout project lifecycles, identifying vulnerabilities and recommending pragmatic mitigations.
- Lead or facilitate threat modelling exercises for applications, APIs, automation workflows, and AI-powered services.
- Develop security requirements, reference architectures, and implementation guidance for engineering teams.
- Advise on secure application design, identity management, data protection, encryption, monitoring, and resilient system design.
- Review integrations between enterprise systems, cloud platforms, and AI services to ensure secure data flows and appropriate access controls.
- Support the development of governance frameworks, security standards, and technical guardrails for AI adoption.
- Monitor developments in AI security, emerging attack techniques, and industry trends, translating these into practical recommendations.
- Work collaboratively with engineering, infrastructure, architecture, legal, privacy, and risk teams to support secure technology delivery.
- Contribute to security documentation, technical standards, and continuous improvement initiatives within the Information Security function.
Skills & Experience
We’re looking for an experienced security professional who combines strong technical knowledge with the ability to communicate effectively across technical and business audiences.
- 5–7 years’ experience in cyber security, information security, security engineering, or a comparable technical role.
- Experience supporting security across enterprise technology projects, cloud environments, or digital transformation initiatives.
- Strong understanding of security architecture principles and secure‑by‑design methodologies.
- Knowledge of identity and access management, authentication, authorisation, encryption, network security, logging, monitoring, and security operations.
- Experience performing security assessments, architecture reviews, or technical risk analysis.
- Familiarity with modern cloud platforms such as Microsoft Azure and Microsoft 365, along with SaaS‑based technologies.
- Understanding of AI technologies, large language models, generative AI services, automation platforms, and the security considerations associated with their adoption.
- Experience with threat modelling methodologies such as STRIDE or equivalent frameworks.
- Ability to explain technical risks clearly and present practical, risk‑based recommendations to stakeholders.
- Excellent written documentation and stakeholder engagement skills.
- Experience developing or implementing AI governance, secure AI frameworks, or security controls for AI‑enabled solutions.
- Knowledge of AI‑specific attack vectors including prompt injection, data leakage, model manipulation, insecure plugins, excessive permissions, and supply‑chain risks.
- Experience working within regulated environments or organisations aligned to recognised security frameworks such as ISO 27001, NIST CSF, or CIS Controls.
- Familiarity with DevSecOps, Infrastructure as Code, CI/CD security, and secure software development practices.
Qualifications
Relevant professional certifications are desirable but not essential, including:
#J-18808-Ljbffr…