AI Security Lead

Randstad; Greater London; Hybrid; GBP 75,000 - 95,000; Full time

Job summary

Randstad is seeking an AI Security Lead to join our Financial Services team in London. This role focuses on driving the integration of AI solutions like SPIFFE/SPIRE into AWS, ensuring compliance with regulations, and enhancing security measures against threats. The ideal candidate should have extensive experience with Identity Security, AWS Bedrock, and deep knowledge of regulatory frameworks within the UK landscape. This position offers a hybrid work model with 2 days in the office and 3 days remote.

Qualifications

• Strong understanding of the UK financial services landscape and compliance requirements.
• Hands-on experience with AWS Bedrock and AI/ML foundations.
• Expert-level knowledge of secure AI principles and threats.

Responsibilities

• Lead the rollout of SPIFFE/SPIRE and integrate with AWS.
• Implement sender-constrained tokens to prevent credential theft.
• Enhance SOC playbooks for sophisticated threat detection.

Skills

Identity Expertise

AWS Bedrock

OWASP LLM Top 10

DORA

FCA Operational Resilience

Tools

SPIFFE

SPIR

Job description

AI Security Lead: Identity & Resilience

Location: London (2 Days in the office, 3 days remote)

Contract: 6 months

We are looking for a heavy-hitting Identity Expert to join our Financial Services team. You’ll be at the intersection of Agentic AI and Zero Trust, building the secure backbone for the next generation of AWS Bedrock deployments.

The Baseline

• FinServ Pro: You know the UK landscape inside out—DORA, FCA Operational Resilience, and the EU AI Act aren’t just buzzwords to you; they’re your toolkit.
• Bedrock Builder: Hands-on experience with AWS Bedrock (Agents, Knowledge Bases, Guardrails, and the full model lifecycle).
• AI/ML Foundations: Deep understanding of FMs, RAG, non-deterministic agents, and complex tool-use.
• Secure AI: Expert-level knowledge of OWASP LLM Top 10 and Agentic AI threats. Familiarity with NIST AI RMF is a massive plus!

Your Mission: Identity & Access Specialist

As our Identity Lead, you’ll be the gatekeeper for our autonomous agents. You will:

• Lead the Charge: Drive our SPIFFE/SPIRE rollout, integrating seamlessly with AWS (IAM Roles Anywhere, STS Tags).
• Lockdown Credentials: Implement sender-constrained tokens (PoP) to kill credential theft in its tracks.
• Harden Flows: Secure OBO (On-Behalf-Of) flows with rigorous claim validation and JIT provisioning for non-human identities.
• Threat Hunter: Enhance SOC playbooks to detect sophisticated agent threats like Confused Deputy and Federation Hijack.
• Regulatory Guru: Ensure 100% traceability from agent actions back to a human identity, keeping us airtight for EU AI Act Articles 12 & 14.