AI Security Engineer

Smith+Nephew; Maharashtra; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Life Unlimited. is seeking an AI Security Engineer to embed security into the design, build, and deployment of AI-enabled web apps and agents within enterprise data ecosystems.

You will work with development and platform teams to implement Microsoft security capabilities and best practices across Azure, Copilot Studio, and Power Platform. Ideal candidates have 4–7 years in application or cloud security, hands-on Azure security experience, and familiarity with AI security risks.

Qualifications

• Bachelor's degree in CS, Engineering, or equivalent.
• 4–7 years in application, cloud security or security engineering.
• Hands-on with Microsoft Azure and security controls.
• Familiarity with AI security risks and governance.
• Microsoft security certifications preferred.

Responsibilities

• Serve as the security engineer on enterprise AI projects from design to deployment.
• Perform threat modelling and security design reviews for AI apps and integrations.
• Define security requirements for AI solutions on Microsoft platforms.
• Review AI tool architectures against approved lists and enterprise maps.
• Identify AI-specific risks such as prompt injection and data leakage.
• Guide identity, access, and data protection with Entra ID, Key Vault, Purview.
• Implement AI runtime protections like AI gateway and Content Safety.
• Support secure development through code reviews and security testing.
• Coordinate AI application penetration testing and remediation tracking.
• Use Defender for Cloud and Sentinel to monitor AI workloads.
• Maintain AI incident response runbooks and incident handling.
• Document assessments and elevate significant issues to AI Security Manager.
• Share best practices and contribute to security standards.

Skills

Cloud security

App security

Threat modelling

Azure security

IAM

Security testing

Incident response

Penetration testing

Secure development

Security architecture

Education

Bachelor's degree

Tools

Defender for Cloud

Microsoft Sentinel

Purview

Entra ID

Job description

Job Title – AI Security Engineer

Location: Kharadi, Pune, India.

Life Unlimited.

The AI Security Engineer is a hands‑on individual contributor reporting to the AI Security Manager. The role is directly assigned to enterprise AI projects, embedding security into the design, build, and deployment of web applications, AI agents, and their integrations with enterprise data and systems. Working closely with development and platform teams, the AI Security Engineer applies Microsoft security capabilities and AI security best practice to identify risks, define practical security requirements, and confirm the right controls are in place before and after release.

What will you be doing?

• Serve as the dedicated security engineer on assigned enterprise AI projects, supporting delivery teams from design through deployment and ongoing operation.
• Perform threat modelling and security design reviews for web applications, AI agents, copilots, and their integrations with enterprise data and systems.
• Define and validate security requirements for AI solutions built on Microsoft platforms, including Azure, Microsoft Foundry, Copilot Studio, Microsoft 365 Copilot, and Power Platform.
• Review proposed AI tools and solution architectures against the approved tool list and the enterprise architecture capability map, and advise on approval status.
• Identify and help mitigate AI‑specific and agentic AI risks such as prompt injection, data leakage, insecure tool and plugin use, MCP and tool integration risks, and excessive agent permissions, aligned with frameworks such as OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and NIST AI RMF.
• Guide implementation of identity, access, and data protection controls, including Microsoft Entra ID, managed identities, Azure Key Vault, Microsoft Purview, and network isolation.
• Define and validate agent identity and permission models, ensuring each AI agent uses least‑privilege access to tools and data.
• Guide implementation of AI runtime protections such as an AI gateway or Azure API Management, Prompt Shields, and Azure AI Content Safety.
• Support secure development practices through code and configuration reviews, security testing, and tracking remediation of findings with development teams.
• Coordinate penetration testing for AI applications, including scoping, managing external testers, and tracking findings to closure.
• Use Microsoft security tooling such as Microsoft Defender for Cloud and Microsoft Sentinel to help monitor AI workloads and support investigation of AI‑related security issues.
• Own and maintain AI incident response runbooks, and support incident handling for AI‑related security events.
• Document security assessments, risks, and residual risk decisions, and elevate significant issues to the AI Security Manager.
• Contribute to AI security standards, reusable secure design patterns, and guidance, and share best practice with project teams.

What will you need to be successful?

• Education: Bachelor’s degree in computer science, Engineering, Information Systems or equivalent experience.
• Licenses / Certifications : Microsoft security or AI certifications preferred. CISSP, CISM, or equivalent preferred.
• Experience: 4 to 7 years in application security, cloud security, or security engineering, including hands‑on work securing cloud or AI‑enabled applications.
• Domain Expertise:
• Cybersecurity, application security, and cloud security engineering, with working knowledge of risk management and compliance.
• Understanding of AI, Machine Learning, Generative AI, AI agents, and associated security risks.
• Hands‑on experience with Microsoft Azure and Microsoft 365 security controls , including Microsoft Entra ID, Defender, Purview, and Sentinel.
• Familiarity with Microsoft AI platforms such as Microsoft…