AI Security Engineer I — Safeguard AI & Cloud Security

Checkout Ltd; Greater London; Híbrido; GBP 70.000 - 120.000; Jornada completa

Descripción de la vacante

Checkout.com is seeking a Cyber Security Engineer I to design and implement AI security controls and ensure safe, governed AI adoption across the organisation. You will partner with Engineering, Data Governance, GRC, and business teams to embed security into AI systems and assess AI-related risks.

You will bridge cyber security with emerging AI technologies, shaping how Checkout secures AI tools, models, data pipelines and infrastructure, while exploring opportunities to strengthen cyber defence

Formación

• Experience in cyber security engineering or related security role.
• Strong understanding of IAM, cloud security, application security, data protection, logging and monitoring, and incident response.
• Knowledge of AI/ML and LLM concepts, including model deployment patterns, APIs, embeddings, vector stores, prompt handling, and common AI security risks.
• Experience securing cloud environments and modern development workflows in platforms such as AWS, Azure, or GCP.
• Familiarity with security risks relevant to AI systems, including prompt injection, data exfiltration, insecure model access, supply chain risks, model poisoning, and sensitive data exposure.
• Experience conducting architecture reviews, threat modelling, and security assessments for complex technical solutions.
• Ability to translate technical risk into clear, practical guidance for engineering and non-technical stakeholders.
• Strong collaboration skills across cyber security, engineering, data, legal, and business teams.
• A proactive mindset, operating in a fast-moving area where standards and best practices evolve.

Responsabilidades

• Design and implement security controls for AI and machine learning solutions, including LLM-based applications, model integrations, and supporting cloud infrastructure.
• Assess the security, privacy, and compliance risks associated with AI systems, including model misuse, prompt injection, data leakage, insecure plugins, over-permissioned access, and third-party AI services.
• Develop standards, guardrails, and reference architectures for the secure use of AI across the organisation.
• Review AI use cases, architectures, and deployments to ensure alignment with cyber security policies, regulatory requirements, and internal governance expectations.
• Build and maintain monitoring, detection, and response capabilities for AI-related threats and misuse scenarios.
• Identify opportunities to use AI to enhance cyber security operations, such as alert triage, threat analysis, playbook automation, knowledge retrieval, and workflow optimisation.
• Stay current on evolving risks, attack techniques, regulations, and industry practices related to AI security and AI governance (inline with EU AI Act, ISO42001)

Conocimientos

Cyber security engineering

Security architecture

AI/ML & LLM basics

Cloud security

AI risk awareness

Architecture reviews

Risk translation

Collaboration

Proactive mindset

Descripción del empleo

Company Description

We’reCheckout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.

We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.

Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.

If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.

With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.

The role

You will be a hands-on operator at the heart of the Cyber Security team, helping to run, harden, and continuously improve the day-to-day machinery of security. Where the Detection & Threat Engineer defines what "good" looks like, you help make it real, turning standards, runbooks, and tooling into reliable, repeatable operational practice.

This is a delivery-focused role for an experienced practitioner. You will spend your time in the tooling, in the tickets, and in the detail: enhancing the platforms the team depends on, tightening procedures, and making sure findings, alerts, and remediation work actually get closed out rather than left to drift.

You will partner closely with Senior Detection & Threat Engineers, Application Security, Information Security, Security Operations, and Engineering executing against the standards they set, feeding operational insight back up, and progressively taking ownership of the tooling and procedures that keep security operations running.

What you'll be responsible for

• Supporting and enhancing security tooling SIEM, EDR, DLP, vulnerability management, and automation platforms including configuration, tuning, and day-to-day maintenance

• Building and improving operational procedures, runbooks, and playbooks so the team's response is consistent and repeatable

• Triaging and handling security alerts, escalating high-severity events, and contributing to incident response under the direction of senior engineers

• Tracking, coordinating, and driving pentest and vulnerability findings through to remediation across engineering teams (ownership, action plans, status, closure)

• Maintaining the accuracy and hygiene of security data asset inventories, finding trackers, and remediation records

• Supporting detection deployment and validation, and feeding operational feedback into detection tuning to reduce noise and alert fatigue

• Assisting with scripting and automation to remove manual toil from recurring operational tasks

• Producing clear operational reporting and metrics on findings, remediation progress, and tooling health

What we're looking for

• 5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security role

• Practical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platforms

• Solid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles

• Comfort with scripting to support automation and tooling (e.g. Python, KQL)

• Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure

• Working knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaS

• Familiarity with common frameworks and standards such as PCI DSS, NIST CSF, SOC 2, ISO 27001, CIS Benchmarks, and MITRE ATT&CK

• A pragmatic, ownership-minded operator: methodical, detail-oriented, and focused on getting things fixed rather than just logged

Additional Information

Bring all of you to work

We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.

Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.

We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.

It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.

Life at Checkout.com

We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.

Curious about what it’s like to be part of our team? Visit our Careers Page to learn more about our culture, open roles, and what drives us.

For a closer look at daily life at Checkout.com, follow us on LinkedIn and Instagram