AI Security Engineer

GCS Recruitment Specialists; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

GCS Recruitment Specialists is seeking an AI Security Engineer for a 1-year renewable contract in Abu Dhabi. You will engineer and validate security controls for AI/ML services, including Azure AI tools, safeguarding data, identities, models, APIs, and AI infrastructure throughout the lifecycle.

You will assess authentication, RBAC, secret management, and data flows, while implementing guardrails, threat modelling, and AI supply-chain security.

Qualifications

• 3+ years of cybersecurity engineering experience, including cloud security, application security, or data security, with practical exposure to AI/ML or agentic AI platforms.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering, or equivalent.
• Postgraduate qualification in Information/Cyber Security is an advantage.

Responsibilities

• Engineer and validate security controls for AI/ML and agentic AI services.
• Review Azure OpenAI, Azure AI Foundry/Services, Azure Machine Learning, and approved third-party AI services.
• Assess authentication, authorization, managed identities, service principals, API keys, secrets, network exposure, and rate-limiting controls.
• Implement and validate least-privilege RBAC, private endpoints, firewall rules, network isolation, encryption, and secure secret storage.
• Assess AI data flows for PII/PHI and confidential data exposure across prompts, outputs, RAG repositories, connectors, and training datasets.
• Configure or validate content safety filters, prompt guardrails, custom blocklists, and abuse-prevention controls.
• Test for prompt injection, jailbreaks, insecure output handling, excessive agency, data leakage, model misuse, and integration abuse.
• Review model registry permissions, model/version integrity, dependency provenance, and AI supply-chain security.
• Develop AI-specific logging, monitoring, and detection use cases for anomalous API activity, prompt attacks, privilege misuse, and data exposure.
• Coordinate with AI Governance, Privacy, Legal, Data, Cloud, AppSec, SOC, and business owners.

Skills

Azure security

AI security

CISSP

CCSP

CISM

Kubernetes

Education

Bachelor's degree in CS/Cybersecurity

Postgraduate information/cyber security

Job description

AI Security Engineer

Job Information

Job Title: AI Security Engineer
Type: Contract 1 year renewable
Sub-Business Unit: Technology Assurance
Location / Coverage: Abu Dhabi

Job Purpose

Engineer and validate security controls for AI/ML and agentic AI services used by the organization, including Azure AI Services, Azure OpenAI, Azure Machine Learning, AI-enabled applications, and third-party AI platforms. The role protects sensitive and regulated data, identities, models, APIs, integrations, and AI infrastructure throughout the AI lifecycle.

Primary Responsibilities

• Maintain an inventory of AI/ML assets, models, inference endpoints, agents, connectors, plugins, training pipelines, and supporting infrastructure.
• Perform security reviews for Azure OpenAI, Azure AI Foundry/Services, Azure Machine Learning, and approved third-party AI services.
• Assess authentication, authorization, managed identities, service principals, API keys, secrets, network exposure, and rate-limiting controls.
• Implement and validate least-privilege RBAC, private endpoints, firewall rules, network isolation, encryption, and secure secret storage.
• Assess AI data flows for PII/PHI and confidential data exposure across prompts, outputs, RAG repositories, connectors, and training datasets.
• Configure or validate content safety filters, prompt guardrails, custom blocklists, and abuse-prevention controls.
• Test for prompt injection, jailbreaks, insecure output handling, excessive agency, data leakage, model misuse, and integration abuse.
• Review model registry permissions, model/version integrity, dependency provenance, and AI supply-chain security.
• Develop AI-specific logging, monitoring, and detection use cases for anomalous API activity, prompt attacks, privilege misuse, and data exposure.
• Support Shadow AI discovery and enforcement using approved CASB/SWG, endpoint, and cloud controls.
• Conduct threat modelling and security testing for AI use cases before production release and following material changes.
• Track AI security findings, risks, exceptions, and remediation actions to closure; support risk acceptance where required.Produce AI security assessment reports, data exposure findings, control validation evidence, and maturity recommendations.
• Coordinate with AI Governance, Privacy, Legal, Data, Cloud, AppSec, SOC, and business owners.

Secondary Responsibilities

• Support development of secure AI patterns, guardrails, standards, and reusable review checklists.
• Contribute to AI incident response playbooks and red-team exercises.
• Review third-party AI vendors, data processing terms, retention, and residency controls.
• Maintain awareness of NIST AI RMF, OWASP Top 10 for LLM Applications, ISO/IEC 42001, and emerging AI threats.

Any Other Responsibilities

• Any other responsibilities assigned by the Line Manager in line with business and client requirements.

Skills / Certifications

• Microsoft Azure security/AI certifications such as SC-100, AZ-500, AI-102 or equivalent
• CISSP, CCSP, or CISM (preferred)
• AI security or ML security training; OWASP LLM knowledge
• CKS/Kubernetes or DevSecOps certification (advantage)

Soft Skills

• Excellent written and verbal communication
• Analytical thinking and problem solving
• Attention to detail and quality
• Accountability and ownership
• Teamwork and stakeholder collaboration
• Ability to prioritize and meet deadlines
• Ability to work at client sites and provide after-hours support when required

Minimum Work Experience

• 3+ years of cybersecurity engineering experience, including cloud security, application security, or data security, with practical exposure to AI/ML or agentic AI platforms.

Education

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering, or equivalent.
• Postgraduate qualification in Information/Cyber Security is an advantage.

Preferred Skill Set

• Azure AI/OpenAI/ML security and cloud-native controls
• IAM, managed identities, API security, secrets, and network isolation
• AI threat modelling, prompt injection testing, and secure RAG patterns
• DSPM, DLP, classification, and regulated data protection
• Python/PowerShell, CI/CD, and security automation

GCS is acting as an Employment Business in relation to this vacancy.