Senior Security Consultant

USER EXPERIENCE RESEARCHERS PTE. LTD; Região Norte; Presencial; BRL 180 000 - 300 000; Tempo integral

Resumo da oferta

User Experience Researchers Pte. Ltd. seeks a senior security architect to guide project teams in secure design across cloud, on-premises, and hybrid environments from concept through deployment.

You will conduct risk assessments, threat modelling, and architecture reviews, develop security patterns, and advise on AI security and data protection, reporting to senior stakeholders.

Qualificações

• Bachelor's degree in Computer Science, Information Security, or related field.
• Minimum eight (8) years of relevant experience in cybersecurity, with a strong focus on security architecture, risk assessment, and security consultancy across cloud, on-premises, and hybrid environments
• Deep knowledge of security architecture principles and practices across key domains including cloud security, application security, identity and access management, and data protection
• Strong understanding of risk management methodologies, threat modelling techniques, and security compliance frameworks
• Working knowledge of applicable security policies and frameworks, with experience working in or with highly regulated organizations being highly advantageous
• Familiarity with AI security concepts and the security implications of AI and machine learning system deployments
• Excellent communication and stakeholder engagement skills, with the ability to present complex security concepts clearly to both technical and non-technical audiences
• Ability to work independently, manage multiple concurrent engagements, and deliver quality outcomes with minimal supervision
• Professional certifications such as CISM, CRISC, CISSP, or equivalent are preferred
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus

Responsabilidades

• Engage project teams as a trusted security advisor across cloud, on-premises, and hybrid environments from concept to deployment
• Conduct in-depth security architecture reviews, identifying design-level vulnerabilities and remediation recommendations
• Advise on security design patterns across cloud security, application security, IAM, and data protection
• Perform structured threat modelling on systems and applications and propose mitigations
• Conduct risk assessments to translate technical findings into business impact for stakeholders
• Develop and maintain security design patterns covering key domains, including AI system deployments
• Develop and maintain enterprise security standards and baselines across endpoints, network, cryptography, and AI deployments
• Assess security posture of AI/ML systems across model lifecycle and advise controls
• Advise on secure deployment of AI systems with guardrails and incident response considerations
• Evaluate third-party AI services, LLMs, and data residency risks
• Develop AI-powered tools and workflows to enhance security consultancy efficiency
• Identify and prototype AI-assisted automation for repetitive security tasks

Conhecimentos

Security architecture

Risk assessment

Threat modelling

Cloud security

Application security

Identity and access management

Data protection

AI security

Communication

Formação académica

Bachelor's degree in Computer Science, Information Security

Descrição da oferta de emprego

Key Responsibilities

• Engage project teams as a trusted security advisor, supporting them in solutioning and secure system design across cloud, on-premises, and hybrid environments, from early concept through to deployment
• Conduct in-depth security architecture reviews for new and existing systems, identifying design-level vulnerabilities, misconfigurations, and control gaps, and providing prioritized and actionable remediation recommendations
• Advise project teams on the application of security design patterns and best practices across key domains including cloud security, application security, identity and access management, and data protection
• Perform structured threat modelling on systems and applications, identifying potential threats and attack vectors, and recommending proportionate mitigation controls aligned to the risk profile of the system
• Conduct risk assessments to identify, evaluate, and priorities security risks, translating technical findings into clear business impact to support informed decision-making by project teams and senior stakeholders
• Develop and maintain security design patterns covering key domains including cloud security, application security, identity and access management, data protection, and AI system deployments.
• Develop and maintain enterprise security standards and baselines across key domains including endpoint security, network security, cryptography, and AI system deployments, ensuring they remain aligned with applicable security policies, the evolving threat landscape, and organizational needs
• Assess the security posture of AI and machine learning systems, identifying risks across the model lifecycle including development, training, deployment, and ongoing operations, and recommending appropriate controls to address identified risks
• Advise on the secure and responsible deployment of AI systems, including defining guardrails, human oversight mechanisms, and incident response considerations specific to AI-related security events
• Evaluate and advise on the use of third-party AI services and large language model integrations, assessing risks related to data residency, vendor access, model behaviour, and supply chain exposure
• Develop and iterate on AI-powered tools and workflows to enhance the efficiency and quality of security consultancy activities, such as threat modelling, risk assessment, and architecture review
• Collaborate with project teams and peers to identify repetitive or time-intensive security tasks that could benefit from AI-assisted automation, and prototype practical solutions to address these

Qualification

• Bachelor's degree in Computer Science, Information Security, or related field
• Minimum eight (8) years of relevant experience in cybersecurity, with a strong focus on security architecture, risk assessment, and security consultancy across cloud, on-premises, and hybrid environments
• Deep knowledge of security architecture principles and practices across key domains including cloud security, application security, identity and access management, and data protection
• Strong understanding of risk management methodologies, threat modelling techniques, and security compliance frameworks
• Working knowledge of applicable security policies and frameworks, with experience working in or with highly regulated organizations being highly advantageous
• Familiarity with AI security concepts and the security implications of AI and machine learning system deployments
• Excellent communication and stakeholder engagement skills, with the ability to present complex security concepts clearly to both technical and non-technical audiences
• Ability to work independently, manage multiple concurrent engagements, and deliver quality outcomes with minimal supervision
• Professional certifications such as CISM, CRISC, CISSP, or equivalent are preferred
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus