Senior Cloud & AI Security Enablement Engineer

LexisNexis Risk Solutions; United Kingdom; À distance; GBP 100 000 - 140 000; Plein temps

Avantages offerts par ce poste

Flexible working hours

Wellbeing initiatives

Parental leave

Pension plan

Résumé du poste

LexisNexis Intellectual Property Solutions is seeking a Senior Cloud & AI Security Enablement Engineer to design and implement secure cloud and AI workflows. You will partner with Security Architecture, BISO, and DevOps teams to embed controls in landing zones, pipelines, and IaC, while enabling AI adoption with auditable, explainable processes.

The role focuses on building reusable security patterns, tooling, and guidelines for scalable security delivery across cloud and AI workloads in a

Qualifications

• Experience in machine learning engineering.
• Strong experience in cloud security engineering, application security, security architecture, DevSecOps, or security automation.
• Hands-on experience with at least one major cloud platform such as AWS or Azure.
• Practical knowledge of IAM, logging, encryption, secrets management, network security, storage security, vulnerability management, and secure CI/CD.
• Experience with infrastructure-as-code and cloud security tooling such as CSPM, CNAPP, IaC scanning, SAST, SCA, secrets scanning, or policy-as-code.
• Strong scripting, automation, workflow design, or tooling integration experience.

Responsabilités

• Cloud Security Engineering: Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection.
• Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering-ready requirements.
• Partner with cloud, platform, DevOps, and product engineering teams to embed security controls into cloud landing zones, CI/CD pipelines, infrastructure-as-code workflows, and operational processes.
• Support the implementation and tuning of CSPM, CNAPP, cloud workload protection, IaC scanning, secrets scanning, and related cloud security tooling.
• Develop policy-as-code and control-as-code mechanisms to prevent, detect, and report common cloud misconfigurations.
• Support cloud-native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns.
• Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns.
• AI Security Enablement: Design and maintain AI-assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation.
• Build prompt libraries, review rubrics, validation steps, and human-in-the-loop processes for approved AI use within Information Security.
• Identify repetitive BISO, AppSec, and Security Architecture tasks that can be safely accelerated through AI-assisted processes.
• Partner with GRC, Legal, Privacy, and security leadership to ensure AI-assisted security workflows are auditable, explainable, and aligned with internal risk expectations.
• Measure the effectiveness of AI-assisted workflows, including time saved, consistency improvements, review quality, and reduction in repeat manual work.
• Secure AI Application and Cloud-AI Guardrails: Define secure design patterns for AI-enabled applications, including LLM-based features, retrieval-augmented generation, AI agents, AI APIs, copilots, and automation workflows.
• Establish cloud security requirements for AI workloads, including identity, secrets, data storage, network access, observability, workload isolation, and third-party AI service integrations in partnership with Sec Architecture & AppSec.
• Support AI application threat modelling and risk reviews in partnership with BISO/AppSec.
• Create developer-facing guidance for safe use of AI coding assistants, AI APIs, data ingestion, vector stores, model outputs, and AI-generated code in partnership with BISO/AppSec.
• Security Enablement and Workload Reduction: Convert recurring BISO/AppSec and Security Architecture questions into reusable guidance, decision trees, approved patterns, checklists, and self-service workflows.
• Build lightweight intake and routing mechanisms that help determine when a request needs BISO review, AppSec review, architecture review, GRC input, or engineering remediation.
• Create and maintain a library of approved cloud and AI security patterns that product and engineering teams can reuse.
• Help reduce one-off security consultations by embedding approved security decisions into tooling, templates, and standard delivery workflows.

Connaissances

ML engineering

Cloud security

Application security

Security architecture

DevSecOps

Automation

IAM

Logging

Encryption

Secrets management

Network security

Vulnerability management

IaC scanning

SAST

SCA

Policy-as-code

Scripting

CI/CD

Outils

CSPM

CNAPP

IaC scanning

SAST

SCA

Secrets scanning

Policy-as-code

Description du poste

Senior Cloud & AI Security Enablement Engineer

Enthusiastic about securing cloud platforms and AI-driven solutions in a rapidly evolving technology landscape? Do you enjoy designing security frameworks, enabling secure development practices, and partnering with engineering teams to build resilient, scalable, and compliant cloud and AI environments?

About the team

LexisNexis Intellectual Property Solutions (LNIP) is the global leader in patent intelligence, bringing clarity to innovation for businesses, law firms, universities, and government agencies worldwide. Our mission is to help the innovation community make better decisions faster, with greater confidence, combining the world’s most trusted patent data with sophisticated analytics, AI-powered insights, and purpose-built workflows.

Protégé in PatentSight is LNIP’s next-generation agentic AI assistant, purpose-built for strategic patent analysis. Protégé replaces complex filter-based workflows with natural language questions, surfacing structured, decision-ready insights grounded in trusted data and established metrics.

About the role

We are seeking a Senior Cloud & AI Security Enablement Engineer to provide hands‑on cloud security engineering capability while also enabling the secure and effective use of AI across Information Security and product engineering teams. This role sits between Security Architecture, BISO/Application Security, Cloud/Platform Engineering, and GRC. It is designed to reduce manual workload on Security Architecture and BISO/Application Security by turning recurring security requirements into reusable cloud guardrails, automated controls, AI‑assisted workflows, secure design patterns, and developer‑facing enablement materials. The successful candidate will be a practical builder and security partner who can operate cloud security controls, support secure AI adoption, and use AI to improve the speed and consistency of security delivery.

Key Responsibilities

• Cloud Security Engineering: Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection.
• Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering‑ready requirements.
• Partner with cloud, platform, DevOps, and product engineering teams to embed security controls into cloud landing zones, CI/CD pipelines, infrastructure‑as‑code workflows, and operational processes.
• Support the implementation and tuning of CSPM, CNAPP, cloud workload protection, IaC scanning, secrets scanning, and related cloud security tooling.
• Develop policy‑as‑code and control‑as‑code mechanisms to prevent, detect, and report common cloud misconfigurations.
• Support cloud‑native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns.
• Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns.
• AI Security Enablement: Design and maintain AI‑assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation.
• Build prompt libraries, review rubrics, validation steps, and human‑in‑the‑loop processes for approved AI use within Information Security.
• Identify repetitive BISO, AppSec, and Security Architecture tasks that can be safely accelerated through AI‑assisted processes.
• Partner with GRC, Legal, Privacy, and security leadership to ensure AI‑assisted security workflows are auditable, explainable, and aligned with internal risk expectations.
• Measure the effectiveness of AI‑assisted workflows, including time saved, consistency improvements, review quality, and reduction in repeat manual work.
• Secure AI Application and Cloud‑AI Guardrails: Define secure design patterns for AI‑enabled applications, including LLM‑based features, retrieval‑augmented generation, AI agents, AI APIs, copilots, and automation workflows.
• Establish cloud security requirements for AI workloads, including identity, secrets, data storage, network access, observability, workload isolation, and third‑party AI service integrations in partnership with Sec Architecture & AppSec.
• Support AI application threat modelling and risk reviews in partnership with BISO/AppSec.
• Create developer‑facing guidance for safe use of AI coding assistants, AI APIs, data ingestion, vector stores, model outputs, and AI‑generated code in partnership with BISO/AppSec.
• Security Enablement and Workload Reduction: Convert recurring BISO/AppSec and Security Architecture questions into reusable guidance, decision trees, approved patterns, checklists, and self‑service workflows.
• Build lightweight intake and routing mechanisms that help determine when a request needs BISO review, AppSec review, architecture review, GRC input, or engineering remediation.
• Create and maintain a library of approved cloud and AI security patterns that product and engineering teams can reuse.
• Help reduce one‑off security consultations by embedding approved security decisions into tooling, templates, and standard delivery workflows.

Requirements

• Experience in machine learning engineering.
• Strong experience in cloud security engineering, application security, security architecture, DevSecOps, or security automation.
• Hands‑on experience with at least one major cloud platform such as AWS or Azure.
• Practical knowledge of IAM, logging, encryption, secrets management, network security, storage security, vulnerability management, and secure CI/CD.
• Experience with infrastructure‑as‑code and cloud security tooling such as CSPM, CNAPP, IaC scanning, SAST, SCA, secrets scanning, or policy‑as‑code.
• Ability to translate security standards and architecture requirements into practical implementation patterns.
• Familiarity with generative AI, LLM‑enabled applications, AI‑assisted development, or AI security risks.
• Strong scripting, automation, workflow design, or tooling integration experience.
• Excellent written and verbal communication skills, with the ability to create clear security guidance for engineering teams.
• Experience building cloud security guardrails, landing zone controls, reusable modules, or automated remediation workflows. (Desirable)
• Experience supporting regulated environments or environments with strict customer, contractual, or compliance obligations. (Desirable)
• Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance. (Desirable)
• Experience with RAG architecture, AI agents, vector databases, AI APIs, prompt engineering, or AI application threat modelling. (Desirable)
• Experience building security knowledge assistants, prompt libraries, AI‑assisted review workflows, or security automation. (Desirable)

Why Join Us?

• Join our team and contribute to a culture of innovation, collaboration, and excellence.
• Work in a way that works for you – we promote a healthy work/life balance across the organization. We offer an appealing working prospect for our people. With numerous wellbeing initiatives, shared parental leave, study assistance and sabbaticals, we will help you meet your immediate responsibilities and your long‑term goals.
• Working flexible hours – flexing the times when you work in the day to help you fit everything in and work when you are the most productive.
• Working for you – we know that your well‑being and happiness are key to a long and successful career.
• Generous holiday allowance with the option to buy additional days.
• Life assurance.
• Access to a competitive contributory pension scheme.
• Save As You Earn share option scheme.
• Optional Dental Insurance.
• Maternity, paternity, and shared parental leave.
• Employee Assistance Programme.
• Access to employee resource groups with dedicated time to volunteer.
• Access to extensive learning and development resources.
• Access to employee discounts scheme via Perks at Work.

About the business

LexisNexis Intellectual Property Solutions (LNIP) is the global leader in patent intelligence, bringing clarity to innovation for businesses, law firms, universities, and government agencies worldwide. Our mission is to help the innovation community make better decisions faster, with greater confidence, combining the world’s most trusted patent data with sophisticated analytics, AI‑powered insights, and purpose‑built workflows.

Protégé in PatentSight is LNIP’s next‑generation agentic AI assistant, purpose‑built for strategic patent analysis. Protégé replaces complex filter‑based workflows with natural language questions, surfacing structured, decision‑ready insights grounded in trusted data and established metrics.

We know your well‑being and happiness are key to a long and successful career. We are delighted to offer country specific benefits.

Please read our Candidate Privacy Policy.

We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.

LexisNexis Legal & Professional is a leading global provider of legal, regulatory and business information and analytics that help customers increase productivity, improve decision-making and outcomes, and advance the rule of law around the world. We help lawyers win cases, manage their work more efficiently, serve their clients better and grow their practices. We assist corporations in better understanding their markets and preventing bribery and corruption within their supply chains. We partner with leading global associations and customers to help collect evidence against war criminals and provide tools to combat human trafficking. We endeavour to advance the rule of law across the world.Our teams are combining unparalleled legal and business information with analytics and technology to advance what’s possible for the way our customers work and to advance what’s possible in the world by strengthening the rule of law.