Lead AI Security Engineer-IDP

SGS Société Générale de Surveillance SA; Bengaluru; On-site; INR 3,500,000 - 9,000,000; Full time

Job summary

Société Générale de Surveillance SA is hiring a Lead AI Security Engineer to secure enterprise AI platforms, GenAI applications, and AI-enabled services across their full lifecycle. The role emphasizes hands-on security execution, threat modelling, and practical risk mitigation within a global, enterprise context.

Responsibilities include designing secure AI controls, enabling secure architecture reviews, and aligning with frameworks such as OWASP LLM Top10, MITRE ATLAS, and NIST AI RMF to

Qualifications

• 10+ years in cybersecurity, security architecture, cloud security, or AI security.
• Hands-on security of AI/ML platforms, GenAI apps, LLMs, and AI agents.
• Knowledge of OWASP LLM Top10, MITRE ATLAS, NIST AI RMF and responsible AI.
• Ability to translate AI threats into practical controls.

Responsibilities

• Design and validate security controls for AI platforms, GenAI apps, LLMs, RAG pipelines.
• Partner with engineering, cloud, data and security teams to embed AI security requirements.
• Identify AI-specific threats, conduct threat modelling and adversarial testing.
• Define monitoring, incident readiness, logging and governance alignment.

Skills

AI Security

Threat Modelling

Security Architecture

Cloud Security

Stakeholder Management

Tools

OWASP LLM Top10

MITRE ATLAS

NIST AI RMF

Job description

About the Role

We are hiring a Lead AI Security Engineer to secure enterprise AI platforms, GenAI applications, LLM-based solutions, AI agents, and AI-enabled services across their full lifecycle. The role will focus primarily on AI security engineering, threat modelling, architecture assurance, secure AI control design, adversarial testing, and practical risk mitigation. Governance, standards, and risk reporting are part of the role, but they are secondary to hands‑on AI security execution and the ability to translate AI‑specific threats into secure, scalable, and enterprise‑ready technical controls.

Key Responsibilities

• 1. AI Security Engineering & Architecture
  • Design and validate security controls for AI platforms, GenAI applications, LLM integrations, RAG pipelines, AI agents, model endpoints, and AI‑enabled workflows.
  • Partner with engineering, platform, cloud, data, application security, and architecture teams to embed AI security requirements into design, build, deployment, and operations.
• 2. AI Threat Modelling, Testing & Risk Mitigation
  • Identify and assess AI‑specific threats including prompt injection, jailbreaks, insecure tool use, data leakage, model extraction, poisoning, RAG abuse, agent misuse, and AI supply chain exposure.
  • Conduct AI threat modelling, adversarial testing, attack surface reviews, control gap analysis, residual risk documentation, and mitigation planning across platforms such as DATALABS, AI Foundry, Azure Cognitive Services, Databricks, and Snowflake.
• 3. Secure AI Controls, Monitoring & Compliance Support
  • Define and review controls for model access, prompt and response handling, sensitive data protection, identity and access, secure APIs, logging, monitoring, abuse detection, and incident readiness for AI systems.
  • Use frameworks such as OWASP Top10 for LLM Applications, MITRE ATLAS, NIST AI RMF, Responsible AI, and EU AI Act expectations as supporting references for control alignment and audit readiness.
• 4. AI Security Governance, Enablement & Operational Excellence
  • Support AI cybersecurity standards, secure design patterns, assessment checklists, governance inputs, and awareness material while keeping the primary focus on practical security implementation.
  • Improve AI security metrics, risk visibility, control automation, and reusable security guidance in partnership with platform, cyber, architecture, and automation teams.

Required Skills

• Skill Area
  • Experience 10+ years in cybersecurity, security architecture, application security, cloud security, AI/ML security, or enterprise security engineering.
• AI Security
  • Strong hands‑on experience securing AI, ML, GenAI, LLM applications, RAG pipelines, AI agents, model APIs, or enterprise AI platforms.
• AI Threat Knowledge
  • Deep understanding of prompt injection, jailbreaks, insecure plugins/tools, model poisoning, data leakage, model exfiltration, RAG security, agent security, AI supply chain risk, AI red teaming, and misuse scenarios.
• Frameworks & Standards
  • Working knowledge of OWASP LLM Top10, MITRE ATLAS, NIST AI RMF, Responsible AI, and AI regulatory expectations to support control alignment and governance activities.
• Security Assurance
  • Experience designing, validating, and operationalizing AI security controls, including secure architecture reviews, threat modelling, adversarial testing, remediation tracking, and risk acceptance support.
• Enterprise Security
  • Strong knowledge of cloud security, application security, API security, data protection, IAM, logging, monitoring, security operations, and enterprise risk management as applied to AI systems.
• Stakeholder Management
  • Ability to work with engineering and senior stakeholders, explain AI security risks clearly, and convert them into practical technical controls and mitigation actions.

Preferred Experience

• Experience with AI security engineering, AI red teaming, adversarial testing, model robustness evaluation, secure RAG design, agent security, or AI platform security in regulated environments.
• Experience with enterprise AI platforms such as Azure OpenAI, Microsoft AI Foundry, Azure AI Services, Databricks, Snowflake, Microsoft Purview, or Microsoft security technologies.
• Exposure to Responsible AI, model risk management, AI governance programs, Python scripting, automation, or relevant security certifications such as CISSP, CISA, CRISC, GIAC, CCSP, or ISO27001.

Candidate Profile

• Hands‑on AI security expert who can lead secure architecture reviews, threat modelling, control design, testing, and risk mitigation for enterprise AI systems.
• Comfortable working across cybersecurity, platform engineering, cloud, data, AI, architecture, compliance, risk, automation, and business teams in a complex global environment.
• Demonstrates ownership, clear communication, and the ability to improve AI security maturity while keeping governance practical, lightweight, and aligned to delivery needs.

Why join us

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Business insight

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating? You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.