Lead Security Engineer - AI & Cloud Platform

Bain & Company; Greater London; On-site; GBP 120,000 - 190,000; Full time

Job summary

Bain & Company, Inc. in London seeks a Lead Staff Security Engineer to own the security posture of the Growth AI Performance System. You will secure cloud infrastructure, API surfaces, and AI workflows while embedding security into development and delivery.

You will guide threat modeling, incident response, and compliance activities, working with cross‑functional teams to protect client data and enable secure innovation at scale.

Qualifications

• Minimum 5 years hands-on cybersecurity or cloud security experience.
• Experience securing Azure/AWS cloud environments and IAM, secrets management, monitoring.
• Experience owning security controls for cloud-native apps.
• Strong understanding of RBAC, OAuth 2.0, token validation, and least-privilege.
• Knowledge of AI security risks and mitigation strategies.
• Ability to model threats and embed security into DevSecOps.
• Familiar with GDPR, SOC 2, and enterprise data security requirements.
• Able to communicate security concepts to technical and nontechnical audiences.

Responsibilities

• Secure and harden cloud infrastructure across Azure or AWS.
• Design and maintain authentication, authorization, and identity controls.
• Own secrets management, rotation, and secure configurations.
• Collaborate with DevOps to embed security into CI/CD pipelines.
• Design safeguards for AI-powered workflows and RAG pipelines.
• Lead threat modeling and security reviews for features and changes.
• Support client compliance reviews and security documentation.

Skills

Cybersecurity

Azure/AWS security

Cloud-native security

IAM/OAuth

AI security

Threat modeling

DevSecOps

Regulatory compliance

Stakeholder communication

Education alignment

Education

Associate's or Bachelor's in CS/Engineering/Math

Tools

Garak

PyRIT

Job description

Bain & Company, Inc. in London seeks a Lead Staff Security Engineer to own the security posture of the Growth AI Performance System. You will secure cloud infrastructure, API surfaces, and AI workflows while embedding security into development and delivery.

You will guide threat modeling, incident response, and compliance activities, working with cross‑functional teams to protect client data and enable secure innovation at scale.