Security Engineer - AI Platforms & Product

Nimber; Portugal; Presencial; EUR 60 000 - 80 000; Tempo integral

Resumo da oferta

Nimber in Portugal is seeking an experienced AI Security Engineer to ensure the secure design and operation of AI use cases and platforms. You will work within the Central AI team to embed security controls, translating policies into actionable guidance.

The ideal candidate has over 7 years in cybersecurity, a solid grounding in cloud security, and is fluent in English. Responsibilities include addressing specific AI risks and driving security readiness.

Qualificações

• 7+ years in IT and cybersecurity, including transformation or platform contexts.
• Strong grounding in cloud security and identity/access management.
• Fluency in English and another European language is a plus.

Responsabilidades

• Embed security by design across AI platforms and use cases.
• Translate security policies into practical controls for AI teams.
• Drive remediation from reviews and escalate unresolved gaps.
• Address AI-specific risks like data leakage and prompt injection.
• Support secure implementation for external AI vendors.
• Strengthen incident readiness through effective collaboration.

Conhecimentos

Cybersecurity expertise

Cloud security

Identity and access management

Application security

Secure software development lifecycle (SDLC)

Risk assessment

Stakeholder management

Fluency in English

Descrição da oferta de emprego

About the job

Security Engineer - AI Platforms & Product

Position: AI Security Engineer

Location: Hybrid

Job Summary

As AI Security Engineer, you are the first line security engineering role within the Central AI team / AI Hubs. Your mission is to ensure that AI use cases, agents, and supporting platform components are built and operated securely by design and in line with the groupwide security framework.

Key Responsibilities

• Embed security by design across AI use cases, agents, and platform integrations, with strong controls for access, secrets, logging, monitoring, sandboxing, tool and API restrictions, and external integrations;
• Translate group security policies and architecture into practical controls, reusable patterns, and guidance for AI teams, ensuring alignment with risk, third‑party, supplier, and operational requirements;
• Prepare security‑gate evidence, drive remediation from reviews, and escalate unresolved control gaps, deviations, or delivery risks;
• Address AI‑specific risks such as prompt injection, data leakage, insecure tool use, excessive permissions, and weak auditability through hardening and secure deployment patterns;
• Support due diligence and secure implementation for external AI vendors, models, orchestration components, and APIs, with the right safeguards for data protection and segregation;
• Strengthen AI incident readiness through detection, logging, response scenarios, playbooks, exercises, and close collaboration with SOC and central security teams;
• Scale secure AI delivery through reusable patterns, stronger hub capability, and lessons shared back into the groupwide security model.

Requirements

• 7+ years in IT and cyber security, with at least some of that in transformation, digital or platform contexts;
• Solid technical grounding in cloud security, identity and access management, application security and secure SDLC;
• Working knowledge of AI/ML and Agentic AI security: prompt injection, data leakage, agent identity, tool‑use risk, model supply chain. Familiarity with OWASP LLM Top 10, MITRE ATLAS and NIST AI RMF;
• Experienced with threat modeling, risk assessment and security architecture for distributed systems;
• Strong stakeholder management; able to challenge solution designs constructively and influence without full hierarchical authority;
• Pragmatic, outcome‑driven, biased for delivery; resilient under ambiguity;
• Fluent English; an additional European language is a plus.