Senior Platform Engineer: AI Security & Middle Office

Sanderson; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Sanderson in London is seeking a Senior DevOps / DevSecOps Engineer to secure agentic AI workloads and middle-office integrations. The role sits within security architecture and engineering, bridging AI enablement and supplier delivery, with significant influence on governance and controls.

You will implement OAuth2-based access, test against prompt injection, design MCP gateway policies, and ensure data residency while aligning with NIST AI RMF and ISO standards.

Qualifications

• Hands-on security engineering in cloud environments (AWS preferred).
• Experience with risk-based AI/LLM security controls.
• Proficient in OAuth2/OIDC and API security.
• Ability to perform security assessments of suppliers.
• Familiar with threat modelling and MAESTRO/OWASP guidance.

Responsibilities

• Define agentic AI security controls and audit trails.
• Threat model AI systems and derive backlog items.
• Lead security input for middle-office provider selection.
• Design secure integration with provider—auth, encryption, data minimisation.
• Produce CAB-ready evidence and reusable AI security patterns.

Skills

Cloud security

LLM risk

OAuth2/OIDC

Vendor security

Threat modelling

Python coding

AI frameworks

Security governance

Tools

AWS

Amazon Bedrock

MAESTRO tooling

Job description

Sanderson in London is seeking a Senior DevOps / DevSecOps Engineer to secure agentic AI workloads and middle-office integrations. The role sits within security architecture and engineering, bridging AI enablement and supplier delivery, with significant influence on governance and controls.

You will implement OAuth2-based access, test against prompt injection, design MCP gateway policies, and ensure data residency while aligning with NIST AI RMF and ISO standards.