GenAI Cloud Security Engineer

S&P Global; Hyderabad; On-site; INR 2,500,000 - 3,500,000; Full time

Job summary

A prominent global financial services firm is seeking a GenAI Cloud Security Lead to enhance cloud security measures. The role mandates over 10 years of experience in information security, focusing on safeguarding AI applications, ensuring compliance with regulations, and developing security strategies for cloud services. Candidates should have a strong understanding of GenAI and relevant certification in AI/ML cloud services. The position emphasizes proactive risk management and collaboration across security and development teams.

Qualifications

• 10+ years of Information Security experience in areas of Information/Cloud Security.
• 5+ years of software engineering and/or software development experience required.
• Certification in any of the AI/ML cloud services.
• Good understanding of application and data security, AI, and Machine Learning.
• Strong understanding of GenAI, LLM, and OWASP LLM Top 10.
• Experience in security architecture assessments for IT systems.

Responsibilities

• Develop and implement comprehensive AI/ML security strategies.
• Conduct threat modeling exercises with AI development teams.
• Perform security assessments on AI applications to identify vulnerabilities.
• Collaborate with legal teams to ensure AI systems comply with regulations.
• Develop configuration hardening guidelines for Cloud Services.

Skills

Information Security experience

Software engineering

Application and data security

GenAI and LLM understanding

Prompt Engineering

Communication skills

Problem solving

Job description

About the Role

GenAI Cloud Security Lead

The Team

The GenAI Cloud Security Lead Architect, part of the Cloud Security team, is responsible for safeguarding an organization's digital assets, data, and applications hosted in cloud environments. Our primary focus is to ensure the integrity, confidentiality, and resilience of AI models, specifically focusing on detecting and mitigating vulnerabilities, implementing robust encryption practices, and safeguarding against potential misuse or exploitation of generated outputs. The Team is based in New York, New Jersey, London, Delhi NCR and Hyderabad.

Responsibilities and Impact

A cloud security team plays a vital role in enhancing an organization's security posture within cloud environments. By proactively identifying and mitigating risks, safeguarding sensitive data, ensuring compliance, and responding to security incidents, the team not only reduces security threats but also instills confidence, supports innovation, and promotes business continuity, thereby contributing significantly to S&P Global's success and resilience in the cloud era. The position is critical as the business is very dynamic and constantly evolving to Power the Markets of the Future.

• Develop and implement comprehensive AI/ML security strategies, policies, standards, and guidelines to protect organizational assets and ensure the secure operation of AI and ML systems
• Build security control framework and generic reference architectures for GenAI applications.
• Assist with identifying security requirements to be followed by LoB/Dev teams when building GenAI applications.
• Conduct threat modeling exercises to identify potential security risks and vulnerabilities in AI systems, working closely with AI development teams to integrate security into the design and development processes.
• Provide thought leadership and creativity to mature Gen AI security governance embedding into our existing cyber security risk appetite framework.
• Perform security assessments on AI applications and systems to identify and address vulnerabilities. Develop and implement testing methodologies to evaluate the security posture of AI models and frameworks.
• Develop configuration hardening guidelines for Cloud Services including native Generative AI/ML services such as AWS SageMaker, SageMaker Notebooks, Bedrock, Kendra, OpenSearch, Lambda, Azure Cognitive Services, OpenAI, GCP Vertex AI etc.
• Stay updated on relevant regulations and standards related to AI security and ensure compliance. Collaborate with legal and compliance teams to align AI systems with industry and regulatory requirements.

What We’re Looking For

Basic Required Qualifications

• 10+ years of Information Security experience in areas of Information/Cloud Security
• 5+ years of Software engineering and/or software development experience is required.
• Certification in any of the AI/ML cloud services
• Good understanding of application and data security, AI/Gen AI, Machine Learning, or data science
• Strong understanding of GenAI, LLM, Prompt Engineering and OWASP LLM Top 10
• Security architecture assessments for one or more IT systems such as Web, Mobile, APIs/Microservices, Cloud (AWS/GCP/Azure/Oracle)
• Experience developing Reference Security Architecture and Design Patterns to support proactive and automated controls.
• A demonstrated knowledge of information security standards, rules and regulations related to information security and data confidentiality and other various security standards and policies.
• Good interpersonal and communication skills with the ability to influence at all levels of the organization, while being able to simplify complex IS topics
• Excellent problems solving abilities and analytical skills
• Ability to organize, prioritize, and lead multiple deliverables simultaneously across a large, global corporate environment.