Senior Cyber Security Engineer

NES Fircroft; Oslo; Hybrid; NOK 1,100,000 - 1,400,000; Full time

Job summary

NES Fircroft in Oslo is seeking a highly technical security consultant to protect AI platforms, agents, and cloud environments. You will assess, implement, and improve security controls across AI infrastructure and workflows in Azure and Microsoft's AI ecosystem.

The role focuses on governance, threat modeling, logging, guardrails, and secure design patterns to prevent unauthorized actions. You will report findings with gaps and recommended actions.

Qualifications

• Expertise securing AI platforms, AI agents and cloud environments.
• Experience with Azure and Microsoft's AI ecosystem.
• Ability to assess, implement and improve security controls across AI infrastructure, agents and workflows.

Responsibilities

• Review AI agent permissions, identities and access controls.
• Implement guardrails to prevent unauthorized actions by AI agents.
• Evaluate security posture of AI-related Azure services and infrastructure.
• Establish logging, monitoring and alerting for AI agent activity.
• Support AI developers with secure design patterns and best practices.
• Review data protection controls, DLP and governance policies for AI workloads.
• Assess detections and response capabilities for AI-related threats.

Skills

Cloud security

Identity security

Security monitoring

Securing AI agents

Threat modeling

AI governance

Infrastructure-as-Code security

DevSecOps

Adversarial testing

Tools

Microsoft Purview

Microsoft Sentinel

Job description

Contract period: 12.10.2026 - 19.12.2026

Location: Lysaker (The relevant candidate can work from other Company offices.)

Description

We are looking for a highly technical consultant with experience securing AI platforms, AI agents, and cloud environments. The ideal candidate combines cybersecurity expertise with practical experience in Azure and Microsoft's AI ecosystem and can independently assess, implement, and improve security controls across AI infrastructure, agents, and workflows.

Scope

Secure our AI ecosystem, including Microsoft 365 Copilot/Cowork/Scout, Copilot Studio, Azure AI Foundry and agentic workflows.

• Review Microsoft Purview and DLP policies to assess whether data protection controls are adequately implemented to handle risks related to AI agents.
• Review Microsoft Sentinel and Defender XDR detections and alerting related to AI usage and data access.
• Review current logging and monitoring capability related to internal agent usage.
• Support AI developers with secure design patterns, guardrails, and security best practices.
• Assess and implement guardrails to prevent AI agents from performing unauthorized actions or accessing unauthorized data.
• Assess and improve the security posture of AI-related Azure services and infrastructure.
• Review AI agent permissions, identities, tool access, and workflow security.
• Establish logging, monitoring, auditing, and alerting for AI agent activity where needed.
• Evaluate detection and response capabilities for AI-related threats and misuse.
• Report with overall evaluation, identified gaps and specific recommended actions.
• Review, testing and verification of established guardrails and detections mechanisms.

Qualifications

• Microsoft Purview
• Cloud security and identity security
• Security monitoring and detection engineering
• Securing AI agents and agentic workflows
• Preferred:
• Microsoft Sentinel
• AI governance and AI security frameworks
• Infrastructure-as-Code security
• SSDLC and DevSecOps
• Threat modeling and adversarial testing of AI systems