AI Security Engineer

The Senior Security Engineer - AI, will play a critical role in designing and embedding security controls across AI-driven and agentic systems, ensuring secure-by-design principles are applied throughout the software development lifecycle.

The successful candidate will help to scope, pilot, and deploy system designs aligned to our reimagined infosec vision, with a goal to fully automate security processes at scale across the design, build and maintain phases solution delivery.

The role will work transversally across the wider infosec organisation across 1st, 2nd and 3rd lines of defence to deliver agentic infosec solutions aligned to our target operating model, * Design security solutions for AI-driven and agentic systems

• Conduct threat modelling (AI-specific and traditional) and risk reviews
• Support the embedding security across the end-to-end agentic SDLC (design, test, release, governance)
• Develop reusable security patterns and standards for engineering teams
• Support secure go-to-market processes for new products and capabilities
• Partner with engineering teams to ensure effective handover and implementation
• Validate infosec hypothesis through the build and testing of POCs and Pilots with hands-on POCs
• Support the scoping, build, and industrialization of infosec AI projects across the org.
• Work closely with the Principal InfoSec AI architect and wider infosec architecture team to ensure the scoping and delivery of solutions are aligned to the Strategy

• At least 7 year’s experience within information security, ideally with a hands-on background in application or infrastructure security
• Solid understanding of core security principles and architectures

Experience with: o Threat modelling o Secure system design o Embedding security within the SDLC

• Exposure to AI and agentic systems (practical or conceptual), including: o Security and governance for AI Solutions (Identity, observability, risks) o Agentic Architecture and patterns (MCP, RAG, Tools, Memory, Harnesses)

• Experience working in complex, enterprise-scale environments
• Ability to translate security requirements into engineering-aligned solutions
• Hands-on experience building, testing and deploying security solutions that automate complex processes