> Markdown version of [/jobs/ext/3524442-ai-security-consultant-owasp-nis-cybersecurity-with-llms](https://www.wearedevelopers.com/jobs/ext/3524442-ai-security-consultant-owasp-nis-cybersecurity-with-llms). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AI Security Consultant - OWASP / NIS - CyberSecurity with LLMs

- **Company:** Avanti Recruitment
- **Location:** London, UK
- **Salary:** £60,000.0 - £100,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Cloud Computing Security, Cyber Security, Information Leak Prevention, Identity and Access Management, Open Web Application Security, Security Information and Event Management, Software Vulnerability Management, Data Logging, Large Language Models, Software Security, Model Validation, Data Poisoning, Generative AI, Agentic-AI, National Institute of Standards and Technology Cybersecurity Framework
- **Published:** October 2, 2026
- **Apply:** https://www.reed.co.uk/jobs/ai-security-consultant--owasp-nis-cybersecurity-with-llms/57416096

## About the Role

* A solid background in cyber security consulting, security architecture, risk management or security operations
 * Good grounding across IAM, cloud security, AppSec, data protection, vulnerability management and incident response
 * A working understanding of how GenAI and LLM-enabled systems handle data, prompts, APIs and tools, and awareness of the main AI risks (prompt injection, data poisoning, insecure output handling, vector/embedding weaknesses, AI supply chain)
 * Experience threat modelling complex systems, ideally including agentic workflows
 * Strong communication skills, and the ability to explain emerging risks in plain terms to a CISO or a board

Nice to have: experience with AI governance or model risk, familiarity with NIST AI RMF, OWASP LLM and Agentic guidance, MITRE ATLAS, ISO 27001 or NIST CSF, hands-on SOC/SIEM/SOAR exposure, and certifications like CISSP, CISM, CCSP or GIAC., * Cybersecurity

 * OWASP Security Frameworks
 * ai security

## Description

Organisations are rolling out AI faster than they can secure it. LLM integrations, internal copilots and agents that can call APIs are going live, and the security teams responsible for them are still working out what "good" looks like. This role sits right in that gap.

I'm working with a major UK consultancy to find an AI Security Consultant. You'll be a Cyber Security Consultant first, with a focus on how to secure the use of AI in organisations.

Day to day, that means advising clients on core security across cloud, identity, applications, data and governance, while also helping them get to grips with the new risks AI brings in. Think prompt injection, excessive agency, data leakage, insecure tool use and weak human oversight.

What you'll be doing

You'll run security assessments and architecture reviews, then turn the findings into clear, prioritised advice that makes sense to both engineers and senior stakeholders. On the AI side, you'll threat model agentic workflows, review LLM-based applications, and help clients put sensible guardrails in place around permissions, sandboxing, logging and human-in-the-loop controls. You'll also help them set up governance and assurance for AI systems, from early experimentation through to production.

You'll help security teams use AI safely in their own operations, whether that's alert triage, threat intel enrichment, incident summarisation, detection engineering or vulnerability prioritisation.


## Related Videos

- [GenAI Security: Navigating the Unseen Iceberg](https://www.wearedevelopers.com/videos/1744-genai-security-navigating-the-unseen-iceberg)
- [Your imaginations is (no longer) the limit: how Generative AI empowers people to be creative](https://www.wearedevelopers.com/videos/741-your-imaginations-is-no-longer-the-limit-how-generative-ai-empowers-people-to-be-creative)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Building Trustworthy AI in Industry: Beyond Traditional Cybersecurity](https://www.wearedevelopers.com/videos/1948-building-trustworthy-ai-in-industry-beyond-traditional-cybersecurity)
- [The shadows that follow the AI generative models](https://www.wearedevelopers.com/videos/624-the-shadows-that-follow-the-ai-generative-models)
- [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync)

## Related Articles

- [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer)
- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [MLOps And AI Driven Development](https://www.wearedevelopers.com/magazine/82-mlops-and-ai-driven-development)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)