AI Cybersecurity Engineer – Offensive Security, Threat Modeling

Jobtailor; Deutschland; Vor Ort; EUR 90.000 - 150.000; Vollzeit

Zusammenfassung

Jobtailor seeks a senior Offensive Security professional to lead threat modeling and red teaming for our enterprise AI/ML stack hosted on private infrastructure in Germany.

You will apply MITRE ATLAS, conduct simulated attacks, and harden Kubernetes/OpenShift environments with a focus on data security and secure MLOps.

You will work with SOC, data engineers, and executives to translate complex vulnerabilities into actionable remediation and risk management.

Qualifikationen

• 5+ years in Offensive Security/Red Teaming with AI/ML workloads.
• Banking sector experience in Egypt and CBE compliance.
• Expert knowledge of MITRE ATLAS and OWASP Top 10 for LLMs.
• Proficient in Python or Bash; Linux admin and secure infra practices.

Aufgaben

• Lead predictive threat modeling across localized AI/ML pipelines and environments.
• Perform AI red teaming and simulated attacks on on-prem AI infrastructure.
• Implement MITRE ATLAS framework and map vulnerabilities to tactics.
• Hardening of on-prem infra: GPU clusters, Kubernetes/OpenShift, private registries.
• Collaborate with SOC and data teams for predictive detection and alerts.

Kenntnisse

Offensive security

Red Teaming

AI/ML security

Python/bash scripting

Linux administration

Container security

Secure MLOps

English fluency

Threat modeling

Security frameworks

Ausbildung

Bachelor’s degree in Computer Science or related field

OSCP/OSCE/CRTP/GPEN certifications desirable

Tools

Docker

Kubernetes

OpenShift

Private data registries

Jobbeschreibung

Job Responsibilities

• Predictive AI Threat Modeling: Lead advanced threat-modeling exercises across the bank’s localized AI/ML pipelines, data repositories, and training environments. Anticipate sophisticated attacker behaviors to design preemptive security guardrails before models are moved to production.
• AI Red Teaming & Offensive Simulations: Conduct targeted offensive operations and ethical hacking against our on-premises AI infrastructure. Simulate real-world adversarial attacks, including data poisoning, model inversion, membership inference, evasion attacks, and prompt injection.
• Framework Mapping with MITRE ATLAS: Implement and operationalize the MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) framework. Map identified vulnerabilities to ATLAS tactics and techniques to build a robust, AI-specific defensive matrix aligned with traditional MITRE ATT&CK.
• On-Premises Infrastructure Hardening: Assess and secure the physical and virtual infrastructure hosting our AI workloads, including bare-metal GPU clusters, local containerized environments (Kubernetes/OpenShift), and private data registries, ensuring strict isolation from external threats.
• Proactive Risk Management & Early Detection: Collaborate with the SOC and data engineering teams to build predictive detection use-cases and custom alerts. Identify the early warning signs of an AI-targeted attack or data exfiltration attempt before malicious actors can compromise model integrity.

Requirements

• Professional Experience: 5+ years of dedicated experience in Offensive Security, Red Teaming, or Advanced Penetration Testing, with a proven pivot and at least 2 years of hands-on experience securing or attacking AI/ML workloads.
• Banking Sector Experience (Mandatory): Prior experience working within a regulated financial institution in Egypt. You must understand the security constraints, compliance mandates, and audit rigor required by the Central Bank of Egypt (CBE) for on-premises operations.
• Deep Mastery of AI Attack Frameworks: Expert-level knowledge of MITRE ATLAS and the OWASP Top 10 for Large Language Models (LLMs). You must have a proven track record of translating these theoretical frameworks into practical, automated offensive playbooks.
• On-Prem & Core Technical Skills: Strong proficiency in Python or bash scripting to build custom exploit or testing tools.
• Deep understanding of on-premises infrastructure components (Linux administration, private networking, storage area networks).
• Direct experience with container security (Docker, Kubernetes) and secure MLOps pipelines.
• Education & Certifications: Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a strictly related field.
• Highly valued offensive certifications: OSCP, OSCE, CRTP, or GPEN, alongside any specialized AI/ML security credentials.
• Mindset & Communication: A relentlessly curious, adversarial mindset balanced with strong risk management disciplines. The ability to clearly articulate complex, highly technical AI vulnerabilities into actionable remediation plans for data scientists and senior banking executives. Fluency in English.

Core Competencies

Demonstrates expertise in Offensive Security and Red Teaming, with a strong focus on AI/ML security frameworks and on-premises infrastructure hardening. Proficient in risk management and communication of complex vulnerabilities to diverse stakeholders.