AI Security Consultant - OWASP / NIS - CyberSecurity with LLMs

Avanti; Greater London; On-site; GBP 60,000 - 100,000; Full time

Benefits offered by this job

Bonus

Benefits package

Job summary

Avanti is seeking an AI Security Consultant to secure AI usage in organisations, focusing on cyber security coaching, architecture reviews, and governance across IAM, cloud, applications and data. You will assess AI risks like prompt injection and data leakage and help clients implement guardrails and assurance for AI systems.

You will model complex, agentic workflows, review LLM-enabled apps, and support secure operations from pilots to production, with strong emphasis on communication to CISOs

Qualifications

• Experience in cyber security consulting and security architecture.
• Strong knowledge of IAM, cloud security and data protection.
• Understanding of AI risk in security contexts is a plus.

Responsibilities

• Lead security assessments and architecture reviews.
• Threat model agentic workflows and LLM-enabled systems.
• Develop governance, logging, and human-in-the-loop controls for AI security.
• Communicate risks clearly to engineers and senior stakeholders.

Skills

Cyber security consulting

Security architecture

Risk management

Security operations

IAM

Cloud security

AppSec

Data protection

Vulnerability management

Incident response

Threat modelling

Communication

Education

CISSP

CISM

CCSP

GIAC

Job description

AI Security Consultant - OWASP / NIS - Cyber Security with LLMs

Organisations are rolling out AI faster than they can secure it. LLM integrations, internal copilots and agents that can call APIs are going live, and the security teams responsible for them are still working out what "good" looks like. This role sits right in that gap.

I'm working with a major UK consultancy to find an AI Security Consultant. You'll be a Cyber Security Consultant first, with a focus on how to secure the use of AI in organisations.

Day to day, that means advising clients on core security across cloud, identity, applications, data and governance, while also helping them get to grips with the new risks AI brings in. Think prompt injection, excessive agency, data leakage, insecure tool use and weak human oversight.

What you'll be doing

You'll run security assessments and architecture reviews, then turn the findings into clear, prioritised advice that makes sense to both engineers and senior stakeholders. On the AI side, you'll threat model agentic workflows, review LLM-based applications, and help clients put sensible guardrails in place around permissions, sandboxing, logging and human-in-the-loop controls. You'll also help them set up governance and assurance for AI systems, from early experimentation through to production.

You'll help security teams use AI safely in their own operations, whether that’s alert triage, threat intel enrichment, incident summarisation, detection engineering or vulnerability prioritisation.

What we’re looking for

• A solid background in cyber security consulting, security architecture, risk management or security operations
• Good grounding across IAM, cloud security, AppSec, data protection, vulnerability management and incident response
• A working understanding of how GenAI and LLM-enabled systems handle data, prompts, APIs and tools, and awareness of the main AI risks (prompt injection, data poisoning, insecure output handling, vector/embedding weaknesses, AI supply chain)
• Experience threat modelling complex systems, ideally including agentic workflows
• Strong communication skills, and the ability to explain emerging risks in plain terms to a CISO or a board

Nice to have: experience with AI governance or model risk, familiarity with NIST AI RMF, OWASP LLM and Agentic guidance, MITRE ATLAS, ISO 27001 or NIST CSF, hands‑on SOC/SIEM/SOAR exposure, and certifications like CISSP, CISM, CCSP or GIAC.

Location - work from any of their UK offices - London, Cambridge, Bristol, Manchester, Edinburgh or Belfast.

Salary: £60,000 - £100,000 + bonus + good benefits

Duration: Permanent.

N.B. They do NOT offer visa sponsorship and you will be required to pass BPSS background checks.