Senior Security Engineer

Jobtailor; São Paulo; Presencial; BRL 180 000 - 260 000; Tempo integral

Resumo da oferta

Jobtailor is seeking an AI platform security engineer to design and operate security capabilities across an enterprise AI stack. You will implement infrastructure as code, enforce security controls, and harden Azure OpenAI, Azure AI Foundry, AI search, and Azure ML resources.

The role emphasizes secure-by-design practices and collaboration with SecOps and engineering teams. Responsibilities include configuring private networking, CMK, and data loss prevention, while building automation and

Qualificações

• Knowledge of Azure AI Foundry and OpenAI deployment
• Experience with DLP and data sensitivity labeling for AI
• Proficiency in Azure security controls and governance
• Automation and security-as-code practices in platform lifecycles

Responsabilidades

• Provision and maintain security capabilities on the AI platform
• Implement IaC with embedded security controls
• Hardening of Azure AI services (OpenAI, Foundry, AI Search, Azure ML)
• Configure CMK, Private Endpoints, VNets, and Managed Identity for isolation
• Operate guardrails for safe use of generative models
• Ingest logs, alerts, and correlations into Microsoft Sentinel
• Apply DLP controls and data classification; collaborate with security/compliance
• Collaborate with engineering and data teams to shift security left
• Create runbooks and automation; track control-coverage indicators
• Provide guidance to junior staff and coordinate with SecOps on incidents

Conhecimentos

Security architecture

Threat modeling

Cross-team collaboration

Ferramentas

Terraform

Azure Policy

Microsoft Defender for Cloud

Microsoft Sentinel

KQL

Key Vault

API Management

Descrição da oferta de emprego

Responsibilities

• Provision and maintain security capabilities on the corporate AI platform;
• Implement Infrastructure as Code (Terraform or Bicep) with embedded security controls;
• Perform hardening of resources such as Azure OpenAI, AI Foundry, AI Search, and Azure ML;
• Configure CMK, Private Endpoints, VNets, and Managed Identity for isolation of AI workloads;
• Implement and operate technical guardrails for the safe use of generative models and assistants;
• Instrument AI event telemetry and integrate logs, alerts, and correlations into Microsoft Sentinel;
• Apply and operationalize DLP controls and data classification in partnership with security and compliance teams;
• Work with engineering, AI, and data teams to incorporate security-as-code and shift-left practices into the platform lifecycle;
• Create runbooks, operational standards, automations, and control-coverage indicators for the platform;
• Provide technical guidance to less experienced professionals and collaborate with SecOps to investigate anomalies and incidents.

Requirements

• Azure AI Foundry and Azure OpenAI (deployment, networking, content filters);
• DLP, sensitivity labels, and Insider Risk applied to AI;
• Azure Policy and Microsoft Defender for Cloud;
• Microsoft Sentinel, Log Analytics, and KQL for monitoring and event correlation;
• Azure networking applied to security (Private Link, VNets, Firewall);
• CMK, Managed Identity, Key Vault, and access controls for workload isolation;
• API Management for secure exposure of AI services;
• Infrastructure as Code (Terraform) as a mandatory requirement;
• AI security concepts (prompt injection, jailbreaking, model poisoning, data poisoning, membership inference) at a practical level for platform controls;
• Threat hunting in AI in collaboration with SecOps;
• Adversarial ML at a conceptual level, working together with Red Team;
• Policies and compliance frameworks applicable to AI (GDPR, AI Act, banking regulatory compliance);
• At least one automation/programming language (Python, Go, Shell, or similar).

Core Competencies

Demonstrates expertise in implementing security capabilities on AI platforms, utilizing Infrastructure as Code with Terraform, and applying data loss prevention controls. Proficient in Azure services and security concepts, ensuring compliance with relevant policies and frameworks.