AI Security Consultant – OWASP / NIS - CyberSecurity with LLMs

Avanti; Sefton; On-site; GBP 60,000 - 100,000; Full time

Job summary

Avanti is seeking an AI Security Consultant to join a major UK consultancy, focusing on securing AI usage across cloud, identity, applications, data and governance. You will assess AI/LLM-based systems, threat model agentic workflows and help clients implement guardrails and governance throughout the project lifecycle.

The role requires deep cyber security consulting experience, strong communication skills to explain risks to CISOs and boards, and familiarity with AI governance frameworks.

Qualifications

• Must have solid background in cyber security consulting, security architecture or risk management.
• Experience across IAM, cloud security, AppSec, data protection and incident response.
• Working understanding of GenAI/LLM data handling, prompts, APIs and AI risks.

Responsibilities

• Conduct security assessments and architecture reviews for AI/LLM deployments.
• Threat model agentic workflows and review AI-enabled applications.
• Help clients establish guardrails for permissions, sandboxing, logging and human-in-the-loop controls.
• Support governance and assurance for AI systems from experimentation to production.
• Assist security teams in leveraging AI safely for alert triage, threat intel enrichment, incident summaries and vulnerability prioritisation.

Skills

Cyber security consulting

Security architecture

Risk management

Security operations

IAM

Cloud security

AppSec

Data protection

Vulnerability management

Incident response

Threat modelling

Communication skills

Tools

NIST CSF

OWASP LLM

MITRE ATLAS

Job description

AI Security Consultant - OWASP / NIS - Cyber Security with LLMs

Organisations are rolling out AI faster than they can secure it. LLM integrations, internal copilots and agents that can call APIs are going live, and the security teams responsible for them are still working out what "good" looks like. This role sits right in that gap.

I'm working with a major UK consultancy to find an AI Security Consultant. You'll be a Cyber Security Consultant first, with a focus on how to secure the use of AI in organisations.

Day to day, that means advising clients on core security across cloud, identity, applications, data and governance, while also helping them get to grips with the new risks AI brings in. Think prompt injection, excessive agency, data leakage, insecure tool use and weak human oversight.

What you'll be doing

You'll run security assessments and architecture reviews, then turn the findings into clear, prioritised advice that makes sense to both engineers and senior stakeholders. On the AI side, you'll threat model agentic workflows, review LLM-based applications, and help clients put sensible guardrails in place around permissions, sandboxing, logging and human-in-the-loop controls. You'll also help them set up governance and assurance for AI systems, from early experimentation through to production.

You'll help security teams use AI safely in their own operations, whether that's alert triage, threat intel enrichment, incident summarisation, detection engineering or vulnerability prioritisation.

What we're looking for

• A solid background in cyber security consulting, security architecture, risk management or security operations
• Good grounding across IAM, cloud security, AppSec, data protection, vulnerability management and incident response
• A working understanding of how GenAI and LLM-enabled systems handle data, prompts, APIs and tools, and awareness of the main AI risks (prompt injection, data poisoning, insecure output handling, vector/embedding weaknesses, AI supply chain)
• Experience threat modelling complex systems, ideally including agentic workflows
• Strong communication skills, and the ability to explain emerging risks in plain terms to a CISO or a board

Nice to have: experience with AI governance or model risk, familiarity with NIST AI RMF, OWASP LLM and Agentic guidance, MITRE ATLAS, ISO 27001 or NIST CSF, hands-on SOC/SIEM/SOAR exposure, and certifications like CISSP, CISM, CCSP or GIAC.

Location - work from any of their UK offices - London, Cambridge, Bristol, Manchester, Edinburgh or Belfast.

Salary: £60,000 - £100,000 + bonus + good benefits

Duration: Permanent.

N.B. They doNOT offer visa sponsorship and you will be required to pass BPSS background checks.