AI Security Engineer

Mployee.me; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Hybrid work potential

Health insurance

Professional development assistance

Free cab/transport facility

Job summary

Smith+Nebrew seeks an AI Security Engineer in Pune to embed security into the design, build, and deployment of AI-enabled applications and enterprise data integrations. You will work with Azure, Foundry, Copilot Studio, Power Platform, and security controls to ensure proper protections are in place before and after release.

The role requires 4–7 years in security engineering, strong collaboration with development teams, and experience with Microsoft security tools.

Qualifications

• Bachelor’s degree in computer science, engineering, information systems or equivalent.
• Microsoft security or AI certifications preferred; CISSP, CISM or equivalent preferred.
• 4–7 years in application security, cloud security, or security engineering with hands-on experience securing cloud/AI-enabled apps.

Responsibilities

• Serve as the dedicated security engineer on enterprise AI projects from design through deployment and operation.
• Perform threat modelling and security design reviews for web apps, AI agents, copilots, and integrations with enterprise data.
• Define and validate security requirements for AI solutions on Microsoft platforms (Azure, Foundry, Copilot Studio, Power Platform).
• Review proposed AI tools and architectures against approved lists and enterprise maps; advise on approvals.
• Identify and mitigate AI-specific risks (prompt injection, data leakage, insecure tools) per OWASP and NIST RMF.
• Guide identity, access, data protection controls (Entra ID, Key Vault, Purview, network isolation).
• Define agent identity/permission models ensuring least-privilege access.
• Implement AI runtime protections (AI gateway, Prompt Shields, Content Safety).
• Support secure development through reviews, testing, remediation tracking with dev teams.
• Coordinate AI application penetration testing and manage external testers.
• Use Defender for Cloud and Sentinel to monitor AI workloads and investigate issues.
• Maintain AI incident response runbooks and assist incident handling.
• Document assessments and residual risk decisions; escalate significant issues.
• Contribute to AI security standards and reusable secure design patterns.

Skills

AI security

Threat modelling

Secure SDLC

Cloud security

Identity & access controls

Agentic AI security

Communication

Education

Bachelor’s degree in Computer Science or related field

Tools

Azure security controls

Microsoft Defender for Cloud

Microsoft Sentinel

Microsoft Entra ID

Job description

Job Title – AI Security Engineer

Location: Kharadi, Pune, India.

Life Unlimited. At Smith+Nebrew, we design and manufacture technology that takes the limits off living.

The AI Security Engineer is a hands‑on individual contributor reporting to the AI Security Manager. The role is directly assigned to enterprise AI projects, embedding security into the design, build, and deployment of web applications, AI agents, and their integrations with enterprise data and systems. Working closely with development and platform teams, the AI Security Engineer applies Microsoft security capabilities and AI security best practice to identify risks, define practical security requirements, and confirm the right controls are in place before and after release.

What will you be doing?

• Serve as the dedicated security engineer on assigned enterprise AI projects, supporting delivery teams from design through deployment and ongoing operation.
• Perform threat modelling and security design reviews for web applications, AI agents, copilots, and their integrations with enterprise data and systems.
• Define and validate security requirements for AI solutions built on Microsoft platforms, including Azure, Microsoft Foundry, Copilot Studio, Microsoft 365 Copilot, and Power Platform.
• Review proposed AI tools and solution architectures against the approved tool list and the enterprise architecture capability map, and advise on approval status.
• Identify and help mitigate AI-specific and agentic AI risks such as prompt injection, data leakage, insecure tool and plugin use, MCP and tool integration risks, and excessive agent permissions, aligned with frameworks such as OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and NIST AI RMF.
• Guide implementation of identity, access, and data protection controls, including Microsoft Entra ID, managed identities, Azure Key Vault, Microsoft Purview, and network isolation.
• Define and validate agent identity and permission models, ensuring each AI agent uses least‑privilege access to tools and data.
• Guide implementation of AI runtime protections such as an AI gateway or Azure API Management, Prompt Shields, and Azure AI Content Safety.
• Support secure development practices through code and configuration reviews, security testing, and tracking remediation of findings with development teams.
• Coordinate penetration testing for AI applications, including scoping, managing external testers, and tracking findings to closure.
• Use Microsoft security tooling such as Microsoft Defender for Cloud and Microsoft Sentinel to help monitor AI workloads and support investigation of AI‑related security issues.
• Own and maintain AI incident response runbooks, and support incident handling for AI‑related security events.
• Document security assessments, risks, and residual risk decisions, and escalated significant issues to the AI Security Manager.
• Contribute to AI security standards, reusable secure design patterns, and guidance, and share best practice with project teams.

What will you need to be successful?

• Education: Bachelor’s degree in computer science, Engineering, Information Systems or equivalent experience.
• Licenses / Certifications: Microsoft security or AI certifications preferred. CISSP, CISM, or equivalent preferred.
• Experience: 4 to 7 years in application security, cloud security, or security engineering, including hands‑on work securing cloud or AI‑enabled applications.
• Domain Expertise:
• Cybersecurity, application security, and cloud security engineering, with working knowledge of risk management and compliance.
• Understanding of AI, Machine Learning, Generative AI, AI agents, and associated security risks.
• Hands‑on experience with Microsoft Azure and Microsoft 365 security controls, including Microsoft Entra ID, Defender, Purview, and Sentinel.
• Familiarity with Microsoft AI platforms such as Microsoft Foundry, Azure OpenAI, Copilot Studio, and Power Platform, and their security configuration requirements.
• Understanding of agentic AI security, including agent identities and permissions, MCP and tool security, AI gateways, and Prompt Shields / Azure AI Content Safety.
• Experience securing web applications and APIs, including threat modelling, secure code review, and security testing.
• Ability to translate security requirements into practical guidance for development, platform, data, privacy, and compliance teams.
• Agile / Digital Experience:
• Experience working within Agile delivery environments and product‑centric organisations.
• Skilled at translating requirements into deliverable outcomes and prioritised roadmaps.
• Experience working with cross‑functional teams to deliver technology and security initiatives.
• Individual Skills:
• Strong collaborator who takes ownership of assigned project outcomes.
• Excellent communication and influencing skills.
• Analytical problem solver with strong decision‑making capability.
• Ability to balance innovation, risk management, and business priorities.
• Mindset & Behaviours:
• Exercises sound judgment and make clear, timely decisions in ambiguous or evolving situations.
• Applies critical thinking to interpret complex information, make sense of ambiguity, and guide clear action.
• Demonstrates ethical reasoning and accountability in decision‑making and delivery.
• Brings creativity and strategic imagination to reframe problems, explore opportunities, and shape new solutions.
• Shows learning agility and adaptability in response to change, feedback, and new information.

You. Unlimited.

We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve.

Inclusion + Belonging

- Committed to Welcoming, Celebrating and Thriving. Learn more about our Employee Inclusion Groups on our website https://www.smith-nephew.com/

Other reasons why you will love it here!

• Your Future: Major Medical coverage + Policy exclusions and insurance non‑medical limit. Educational Assistance.
• Work/Life Balance: Flexible Personal/Vacation Time Off, Privilege Leave, Floater Leave.
• Your Wellbeing: Parents / Parents in Law’s Insurance, Employee Assistance Program, Parental Leave.
• Flexibility: Hybrid Work Model (For most professional roles)
• Training: Hands‑On, Team‑Customized, Mentorship
• Extra Perks: Free Cab Transport facility for all employees, One Time Meal provided to all employees as per shift. Night Shift Allowances.

Stay connected by joining our Talent Community.

We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day.

Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N.

Explore our website and learn more about our mission, our team, and the opportunities we offer.