AI Security Consultant

EPAM; Netherlands; On-site; EUR 105,621 - 152,564; Full time

Job summary

EPAM is seeking an AI Security Consultant to join our UK-based hybrid team. You will help clients design and secure AI systems, addressing risks across generative AI and ML pipelines, balancing technical depth with strategic guidance.

This hands-on role involves security assessments, threat modeling, and translating regulations into actionable requirements, working across sectors with EPAM's Cybersecurity practice.

Qualifications

• 5+ years of cybersecurity consulting experience.
• Knowledge of AI/ML concepts and generative AI stack.
• Familiarity with AI security frameworks (OWASP LLM Top 10, MITRE ATLAS).
• Understanding of cloud security (AWS, Azure, GCP).
• Awareness of AI regulations and data protection requirements.
• Strong communication for technical and executive audiences.
• Experience in AI red-teaming or penetration testing.
• Background in software engineering or data science.

Responsibilities

• Lead security assessments of AI/ML systems, incl. LLM apps and ML pipelines.
• Threat-model AI architectures using frameworks like OWASP LLM Top 10, MITRE ATLAS and NIST AI RMF.
• Advise clients on securing the AI lifecycle from data sourcing to deployment and monitoring.
• Define security controls for prompt injection, jailbreaks, data poisoning and supply-chain risk.
• Translate AI regulations and data-protection laws into actionable security requirements.
• Perform adversarial testing and red-teaming of generative AI applications.
• Create documentation, secure design patterns and reference architectures for client teams.
• Act as a trusted advisor for senior stakeholders and support EPAM pre-sales.

Skills

Cybersecurity

AI/ML concepts

LLMs

Cloud security

Regulatory awareness

Communication

Red-teaming

Software engineering background

Tools

OWASP LLM Top 10

MITRE ATLAS

NIST AI RMF

AWS

Azure

GCP

Job description

We’re looking for an AI Security Consultant to join our team in the UK in a hybrid working mode. In this role, you will help clients design and secure AI systems that they can trust, addressing emerging risks across generative AI, agent-based workflows and traditional machine learning pipelines. Acting at the intersection of cybersecurity, machine learning and consulting, you will influence enterprise-wide adoption of secure AI practices and ensure compliance with evolving regulations such as the EU AI Act. This is a hands‑on role with client‑facing responsibility, balancing technical depth with strategic guidance. You will work across multiple sectors, supporting EPAM’s growing Cybersecurity practice and shaping our AI security capabilities as this rapidly evolving field matures.

Responsibilities

• Lead security assessments of AI/ML systems, including LLM applications and ML pipelines.
• Threat‑model AI architectures using frameworks such as OWASP LLM Top 10, MITRE ATLAS and NIST AI RMF.
• Advise clients on securing the AI lifecycle from data sourcing to deployment and monitoring.
• Define security controls for prompt injection, jailbreaks, data poisoning and supply‑chain risk.
• Translate AI regulations and data‑protection laws into actionable security requirements.
• Perform adversarial testing and red‑teaming of generative AI applications.
• Create documentation, secure design patterns and reference architectures for client teams.
• Act as a trusted advisor for senior stakeholders and support EPAM pre‑sales where needed.

Requirements

• 5+ years of cybersecurity experience, ideally with consulting exposure.
• Knowledge of AI/ML concepts, generative AI stack, LLMs, RAG and MLOps pipelines.
• Familiarity with AI security frameworks such as OWASP LLM Top 10 and MITRE ATLAS.
• Understanding of cloud security across AWS, Azure or GCP.
• Awareness of AI-related regulations and data‑protection requirements.
• Strong communication skills for both technical and executive audiences.
• Ability to deliver structured solutions in fast‑moving, ambiguous environments.
• Nice to have: Certifications such as CISSP, CCSP, OSCP or related cloud credentials.
• Practical experience in AI red‑teaming or penetration testing.
• Background in software engineering or data science.

Nice to Have

• Certifications such as CISSP, CCSP, OSCP or related cloud credentials.
• Background in software engineering or data science.