security engineer for AI adoption

Enfint; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Benefits package

Job summary

Brunswick глобальная консалтинговая фирма, специализирующаяся на управлении рисками и безопасностью, приглашает эксперта по кибербезопасности для оценки сторонних инструментов ИИ, архитектуры безопасности и риска. Роль требует глубокого понимания STRIDE и современных облачных платформ, сотрудничества с бизнесом и техническими командами.

Необходим опыт 5–7 лет, знание MS 365, Azure и сертификации по безопасности.

Qualifications

• 5–7 лет опыта в кибербезопасности, информационной безопасности, инженерии безопасности или смежной роли
• Опыт предоставления руководства по безопасности в технологических проектах, платформах и инициативах, включая ИИ
• Понимание архитектуры безопасности, IAM, защиты данных, шифрования, мониторинга и устойчивости

Responsibilities

• Review and assess third-party AI tools, enterprise AI platforms, and new AI-enabled features
• Review and assess requests relating to AI-enabled solutions and integrations
• Provide security architecture guidance for AI team projects
• Support security guardrails, governance processes, and secure design patterns for AI adoption
• Conduct STRIDE-based threat modelling for AI solutions and workflows
• Assess risks of AI use cases including data exposure and model misuse
• Define and document security requirements, architecture decisions, and remediation actions
• Monitor emerging AI security risks and mitigation practices

Skills

Threat modelling

Security architecture

IAM

Data protection

Encryption

Governance

Education

CISSP

CCSP

SSCP

CISM

CISA

CRISC

CompTIA Security+

ISO27001 knowledge

Tools

Microsoft 365

Azure

Job description

Описание:

Brunswick is a global advisory firm that helps companies address high-stakes issues, navigate complex stakeholder relationships, and achieve high-impact outcomes. It provides expertise across financial and investment, regulatory and geopolitical, NGO, and workforce environments.

Задачи:

• Review and assess third-party AI tools, enterprise AI platforms, and new AI-enabled features, including ChatGPT, Claude, Microsoft Copilot, and other emerging technologies
• Review and assess requests relating to AI-enabled solutions, enterprise AI platforms, new features, integrations, and internally developed applications
• Provide security architecture guidance for applications and solutions developed or introduced by the AI team
• Support the implementation of security guardrails, governance processes, and secure design patterns for AI adoption across the firm
• Conduct STRIDE-based threat modelling for internally developed solutions, AI-enabled workflows, integrations, and automation use cases
• Assess risks associated with AI use cases, including data exposure, prompt injection, model misuse, third-party dependency risk, inappropriate access to sensitive information, and insecure integrations
• Advise on secure design principles, including identity and access management, data protection, logging, monitoring, encryption, resilience, and secure configuration
• Define and document security requirements, architecture decisions, design recommendations, and risk-based remediation actions
• Monitor emerging AI security risks, attacker techniques, and industry best practices, ensuring relevant mitigations are considered within Brunswick's environment

Требования:

• 5–7 Years of experience in cyber security, information security, security engineering, or a related technical security role
• Proven experience providing security guidance across technology projects, enterprise platforms, AI-related initiatives, third-party tools, cloud-based solutions, or internally developed applications
• Strong understanding of security architecture and secure design principles, including identity and access management, data protection, logging, monitoring, encryption, network security, and resilience
• Familiarity with AI-related technologies, enterprise AI platforms, large language models, agentic AI, and the security risks associated with AI adoption
• Experience conducting STRIDE-based threat modelling, technical risk assessments, or security design reviews
• Practical understanding of cloud and enterprise environments, particularly Microsoft 365, Azure, SaaS platforms, and modern workplace technologies
• Ability to translate technical security risks into clear, business-focused recommendations
• Strong written and verbal communication skills, with confidence engaging technical and non-technical stakeholders
• Understanding of security risks associated with third-party AI tools, internally developed AI applications, integrations, automation, and agent-based use cases
• Sound judgement, attention to detail, and the ability to balance security requirements with business needs
• Nice to have: Experience working in an ISO27001-aligned or regulated environment, ISC2 CISSP/CCSP/SSCP certifications, ISACA CISM/CISA/CRISC certifications, CompTIA Security+/CySA+/CASP+ certifications

Условия:

Employee benefits supporting financial future, health and wellness, family and community, and continuous professional development.