AI Security Engineer

IND - Smith & Nephew GBS Private Limited; Pune District; Hybrid; INR 2,500,000 - 4,000,000; Full time

Benefits offered by this job

Hybrid work model

Major medical coverage

Educational assistance

Work/Life balance

Job summary

Smith+ Nephew plc is seeking an AI Security Engineer in Pune, India, to embed security into the design, build, and deployment of web apps, AI agents, and integrations with enterprise data. You will work with development teams to apply Microsoft security capabilities and AI security best practices.

The role emphasizes threat modelling, security requirements, and least-privilege access, with hands-on security across Azure, Key Vault, Purview, Defender, and Sentinel. Hybrid work model offered.

Qualifications

• Bachelor's degree in computer science, engineering, information systems or equivalent.
• CISSP/CISM or equivalent are preferred.

Responsibilities

• Serve as dedicated security engineer on enterprise AI projects from design to deployment.
• Perform threat modelling and security design reviews for web apps and AI agents.
• Define and validate security requirements for AI solutions on Azure platforms.
• Review AI tool architectures against approved lists and enterprise maps.
• Identify and mitigate AI-specific and agentic security risks (prompt injection, data leakage, etc.).
• Guide identity, access, and data protection controls (Entra ID, Key Vault).
• Ensure least-privilege access for AI agents and secure runtime protections.
• Support secure development through reviews, testing, and remediation tracking.
• Coordinate penetration testing for AI applications and manage findings.

Skills

Threat modelling

Security reviews

Cross-functional collaboration

Secure coding

Communication

Agile delivery

Decision making

Education

Bachelor's degree in CS/Engineering/Info Systems

Tools

Azure

Microsoft Entra ID

Azure Key Vault

Purview

Sentinel

Job description

Job Title – AI Security Engineer Location: Kharadi, Pune, India. Life Unlimited.

At Smith+ Nephew, we design and manufacture technology that takes the limits off living. The AI Security Engineer is a hands‑on individual contributor reporting to the AI Security Manager. The role is directly assigned to enterprise AI projects, embedding security into the design, build, and deployment of web applications, AI agents, and their integrations with enterprise data and systems. Working closely with development and platform teams, the AI Security Engineer applies Microsoft security capabilities and AI security best practice to identify risks, define practical security requirements, and confirm the right controls are in place before and after release.

What will you be doing?

• Serve as the dedicated security engineer on assigned enterprise AI projects, supporting delivery teams from design through deployment and ongoing operation.
• Perform threat modelling and security design reviews for web applications, AI agents, copilots, and their integrations with enterprise data and systems.
• Define and validate security requirements for AI solutions built on Microsoft platforms, including Azure, Microsoft Foundry, Copilot Studio, Microsoft 365 Copilot, and Power Platform.
• Review proposed AI tools and solution architectures against the approved tool list and the enterprise architecture capability map, and advise on approval status.
• Identify and help mitigate AI‑specific and agentic AI risks such as prompt injection, data leakage, insecure tool and plugin use, MCP and tool integration risks, and excessive agent permissions, aligned with frameworks such as OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and NIST AI RMF.
• Guide implementation of identity, access, and data protection controls, including Microsoft Entra ID, managed identities, Azure Key Vault, Microsoft Purview, and network isolation.
• Define and validate agent identity and permission models, ensuring each AI agent uses least‑privilege access to tools and data.
• Guide implementation of AI runtime protections such as an AI gateway or Azure API Management, Prompt Shields, and Azure AI Content Safety.
• Support secure development practices through code and configuration reviews, security testing, and tracking remediation of findings with development teams.
• Coordinate penetration testing for AI applications, including scoping, managing external testers, and tracking findings to closure.
• Use Microsoft security tooling such as Microsoft Defender for Cloud and Microsoft Sentinel to help monitor AI workloads and support investigation of AI‑related security issues.
• Own and maintain AI incident response runbooks, and support incident handling for AI‑related security events.
• Document security assessments, risks, and residual risk decisions, and escalate significant issues to the AI Security Manager.
• Contribute to AI security standards, reusable secure design patterns, and guidance, and share best practice with project teams.

What will you need to be successful?

• Education: Bachelor’s degree in computer science, Engineering, Information Systems or equivalent experience.
• Licenses / Certifications: Microsoft security or AI certifications preferred. CISSP, CISM, or equivalent preferred.
• Experience: 4 to 7 years in application security, cloud security, or security engineering, including hands‑on work securing cloud or AI‑enabled applications.
• Domain Expertise: Cybersecurity, application security, and cloud security engineering, with working knowledge of risk management and compliance.
• Understanding of AI, Machine Learning, Generative AI, AI agents, and associated security risks.
• Hands‑on experience with Microsoft Azure and Microsoft 365 security controls, including Microsoft Entra ID, Defender, Purview, and Sentinel.
• Familiarity with Microsoft AI platforms such as Microsoft Foundry, Azure OpenAI, Copilot Studio, and Power Platform, and their security configuration requirements.
• Understanding of agentic AI security, including agent identities and permissions, MCP and tool security, AI gateways, and Prompt Shields / Azure AI Content Safety.
• Experience securing web applications and APIs, including threat modelling, secure code review, and security testing.
• Ability to translate security requirements into practical guidance for development, platform, data, privacy, and compliance teams.
• Agile / Digital Experience: Experience working within Agile delivery environments and product‑centric organisations. Skilled at translating requirements into deliverable outcomes and prioritised roadmaps. Experience working with cross‑functional teams to deliver technology and security initiatives.
• Individual Skills: Strong collaborator who takes ownership of assigned project outcomes. Excellent communication and influencing skills. Analytical problem‑solver with strong decision‑making capability. Ability to balance innovation, risk management, and business priorities.
• Mindset & Behaviours: Exercises sound judgment and make clear, timely decisions in ambiguous or evolving situations. Applies critical thinking to interpret complex information, make sense of ambiguity, and guide clear action. Demonstrates ethical reasoning and accountability in decision‑making and delivery. Brings creativity and strategic imagination to reframe problems, explore opportunities, and shape new solutions. Shows learning agility and adaptability in response to change, feedback, and new information.

You. Unlimited. We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve. Inclusion + Belonging - Committed to Welcoming, Celebrating and Thriving. Learn more about our Employee Inclusion Groups on our website https://www.smith-nephew.com/

Other reasons why you will love it here!

• Your Future: Major Medical coverage + Policy exclusions and insurance non-medical limit.
• Educational Assistance.
• Work/Life Balance: Flexible Personal/Vacation Time Off, Privilege Leave, Floater Leave.
• Your Wellbeing: Parents / Parents in Law’s Insurance, Employee Assistance Program, Parental Leave.
• Flexibility: Hybrid Work Model (For most professional roles)
• Training: Hands‑On, Team‑Customised, Mentorship
• Extra Perks: Free Cab Transport facility for all employees, One Time Meal provided to all employees as per shift.
• Night Shift Allowances.

Stay connected by joining our Talent Community. We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day. Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N. Explore our website and learn more about our mission, our team, and the opportunities we offer.

Smith+ Nephew is a global medical technology company. We design and manufacture technology that takes the limits off living. We support healthcare professionals to return their patients to health and mobility, helping them to perform at their fullest potential. From our first employee and founder, T.J. Smith, to our team today, it’s our people who make Smith+ Nephew a unique place. Yes, we love to innovate and develop exciting technologies, and we offer competitive salaries and progressive benefits. But it’s our culture - of Care, Collaboration and Courage - that really sets us apart. Through a spirit of ownership and can-do attitude we work together to win. We’re a company of people who care about each other, about our customers and their patients, and about our communities. Together, we fulfill our shared purpose of Life Unlimited.