Security Consultant - Security Operations & AI Security

Saunders Scott; Genf; Híbrido; CHF 150.000 - 230.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work arrangement

Remote-first with office support

Descripción de la vacante

Saunders Scott is seeking a Security Operations & AI Security Consultant to balance operational security with AI governance. The role is hybrid and initially 3-6 months with renewal possibilities. Key duties include managing vulnerability programs, AI threat modeling, and embedding security across the SDLC.

The candidate will lead security operations, oversee incident triage, and drive backlog remediation while coordinating with CISO reporting. Fluent English required, French a plus.

Formación

• 5+ years in security engineering/operations, with 2+ years in medium/large enterprises.
• End-to-end vulnerability management, EDR/next-gen SIEM operations, firewalls, TLS/PKI.
• Foundational AWS (IAM, SCPs, security groups) and ability to write runbooks.
• Securing production GenAI/LLM deployments and embedding security in SDLC.
• Fluent English; French is an advantage.

Responsabilidades

• Security Operations & Infrastructure: manage monthly scans, patch reporting, and migrations; assess advisories and track remediation.
• Detection & Endpoint Security: onboard AI telemetry to SIEM; triage alerts and incidents.
• Network & Certificate Security: firewall hardening; TLS/PKI lifecycle management.
• AI Security & Product Lifecycle: triage AI use cases; maintain AI capability register; implement pre-launch controls.
• Knowledge Transfer: maintain runbooks and update weekly security task lists for reporting.

Conocimientos

Security engineering

SecOps

Cloud automation

Python automation

English fluency

Educación

CISSP

CCSP

GIAC

CySA+

AWS Security

Herramientas

AWS

F5 BIG-IP

WAFs

PAM

IAM

Next-gen SIEM

Descripción del empleo

Security Operations & AI Security Consultant

Initial 3-6 months (renewable yes)

Hybrid role (mainly remote)

Role Overview

This role balances operational security with AI governance and service ownership backup:

• 45% Security Operations & Backlog Reduction: Daily sec-ops, migrations, and remediation.
• 30% Service Owner Backup Coverage: Independent operation and handover of core security services.
• 25% Secure AI Deployments & Product Lifecycle Framework: AI intake triage, LLM threat modeling, and embedding security across the SDLC.

Key Responsibilities

Security Operations & Infrastructure

• Vulnerability & Exposure Management: Execute monthly scans and patch reporting; support platform migrations; assess vendor advisories/CVEs; track EOL asset remediation.
• Detection & Endpoint Security: Assist endpoint tenant migration and legacy platform retirement; onboard log sources (including AI telemetry) into next-gen SIEM; handle L2 alert/incident triage
• Network & Certificate Security: Apply firewall hardening rules; deliver TLS/PKI lifecycle management, inventory, and domain automation.
• Testing & Backlog Remediation: Drive pen-test/red-team findings to closure; take ownership of unassigned backlog items (focusing on AWS guardrails and playbooks).

AI Security & Product Lifecycle

• AI Security Governance: Perform triage for AI use cases via the intake process; maintain the AI capability register; set pre-launch identity, logging, and rate-limiting controls.
• AI Threat Modeling: Model agentic/GenAI risks (prompt injection, data leakage, autonomy, cost) using standard LLM frameworks; track AI-specific test remediation (e.g., AI chatbots).
• Product Security (SDLC): Embed security stage-gates across transformation workstreams (prototyping, dependency management, go-live, decommission); provide self-service security patterns/checklists and feed product health metrics.

Operations & Knowledge Transfer

• Maintain current runbooks, security plans, and knowledge base articles.
• Update weekly security task lists for CISO reporting.

Qualifications

Required

• Experience: 5+ years in security engineering/ops (2+ years in medium/large enterprise).
• Core SecOps: End-to-end vulnerability management, EDR/next-gen SIEM operations, firewalls, and TLS/PKI.
• Cloud & Automation: Foundational AWS (IAM, SCPs, security groups, CSPM findings); ability to write clear runbooks.
• AI & SDLC Security: Securing production GenAI/LLM deployments (threat modeling, guardrails); embedding security requirements in SDLC/product delivery.
• Languages: Fluent English (French is an advantage).
• Certifications: CISSP, CCSP, GIAC, CySA+, or AWS Security.
• Technical Exposure: Python automation, platform migrations, F5 BIG-IP, WAFs, PAM, IAM.
• Frameworks & Compliance: ISO 27001, NIST CSF, ISO/IEC 42001, NIST AI RMF, EU AI Act, or Swiss data-protection standards.