Secure AI Innovation Engineer (Security Advisor)

Quick Facts

• Hybrid role focused on Secure AI innovation across Application Security, Cloud Security, and AI Security
• Security maturity uplift, end-to-end controls, and AI guardrails for LLM and agentic AI
• Emphasis on innovation, automation, and security-by-design/shift-left delivery

Description

The Secure AI Innovation Engineer is a hybrid security role combining Application Security, Cloud Security, and AI Security with a strong innovation and automation focus. You act as a trusted security advisor to assess clients’ security posture, define pragmatic improvement roadmaps, and design modern, secure, and scalable solutions. The role also enables safe adoption of AI technologies (LLMs and agentic AI) through secure environments and AI-specific security guardrails.

Responsibilities

• Assess clients’ cybersecurity maturity by evaluating current security posture, identifying gaps, and defining improvement roadmaps across applications, cloud platforms, and development processes
• Propose modern and innovative security solutions that improve security posture, enable automation, and enhance security team effectiveness
• Design and implement end-to-end security controls across applications, cloud infrastructure, development pipelines, and operational environments
• Enable secure adoption of AI, including LLM-based solutions and agentic AI
• Define and implement AI security guardrails by identifying, assessing, and mitigating AI-specific risks (prompt injection, data leakage, data poisoning, model abuse, insecure integrations, misuse of autonomous agents)
• Embed security into SDLC and SSDLC with security-by-design and shift-left principles
• Support secure development environments including CI/CD pipelines, Infrastructure-as-Code, APIs, and cloud-native platforms
• Conduct or support application and system security assessments aligned with OWASP Top 10, OWASP ASVS, and OWASP API Top 10
• Facilitate threat modeling for cloud-native, hybrid, distributed, and AI-enabled architectures
• Design and support secure cloud and hybrid architectures across Azure, AWS, and GCP (identity, network security, data protection, platform security)
• Support containerized/cloud-native environments (e.g., Kubernetes) with secure configuration, posture management, and workload protection
• Leverage automation and AI-powered security tools for vulnerability detection, code/config analysis, threat detection, and security operations efficiency
• Translate security risks into clear, actionable recommendations for both technical and non-technical stakeholders
• Secure cloud foundations, data flows and pipelines, AI model integration and inference APIs, and Identity and Access Management
• Support clients in building long-term security capabilities for digital transformation and responsible AI adoption

Requirements

• Strong interest in cybersecurity, innovation, and modern technologies; willingness to learn, grow, and take ownership
• Background in IT, software development, cloud engineering, or security with foundational knowledge across applications and infrastructure
• Understanding of end-to-end architectures (monolithic, microservices, event-driven, cloud-native)
• Foundational application security knowledge: OWASP Top 10/OWASP ASVS, secure coding principles, and common attacks (XSS, SQLi, CSRF)
• Basic to intermediate cloud security knowledge: shared responsibility model, IAM, network and data security
• Familiarity with SSDLC (secure design, testing, vulnerability management)
• Interest in AI/LLMs/agentic AI with awareness of associated security challenges
• Ability to communicate clearly with technical and non-technical stakeholders
• Ownership mindset with ability to work independently and collaboratively
• Basic experience/knowledge of one major cloud platform (Azure, AWS, or GCP), CI/CD and DevSecOps, REST APIs, and API security fundamentals
• Scripting/programming in at least one language (Python, Java, JavaScript, C#, Go)

Benefits

• Permanent employment contract
• People Lead support with a professional development path; possibility of a coaching session
• Wide training package (soft/technical/language training, e-learning access, Gallup test, GenAI training, course co-financing, certification opportunities)
• Employee Assistance Program (legal, financial, psychological consultations)
• Employee share purchase plan eligibility with quarterly dividends (if company shares are owned)
• Paid employee referral program
• Private medical care and life insurance
• Worksmile platform access (including possibility of Multisport card)