Job Search

AI Security Engineer

Job Information

Job Title: AI Security Engineer
Type: Contract 1 year renewable
Sub-Business Unit: Technology Assurance
Location / Coverage: Abu Dhabi

Job Purpose

Engineer and validate security controls for AI/ML and agentic AI services used by the organization, including Azure AI Services, Azure OpenAI, Azure Machine Learning, AI-enabled applications, and third-party AI platforms. The role protects sensitive and regulated data, identities, models, APIs, integrations, and AI infrastructure throughout the AI lifecycle.

Primary Responsibilities

Maintain an inventory of AI/ML assets, models, inference endpoints, agents, connectors, plugins, training pipelines, and supporting infrastructure.Perform security reviews for Azure OpenAI, Azure AI Foundry/Services, Azure Machine Learning, and approved third-party AI services.Assess authentication, authorization, managed identities, service principals, API keys, secrets, network exposure, and rate-limiting controls.Implement and validate least-privilege RBAC, private endpoints, firewall rules, network isolation, encryption, and secure secret storage.Assess AI data flows for PII/PHI and confidential data exposure across prompts, outputs, RAG repositories, connectors, and training datasets.Configure or validate content safety filters, prompt guardrails, custom blocklists, and abuse-prevention controls.Test for prompt injection, jailbreaks, insecure output handling, excessive agency, data leakage, model misuse, and integration abuse.Review model registry permissions, model/version integrity, dependency provenance, and AI supply-chain security.Develop AI-specific logging, monitoring, and detection use cases for anomalous API activity, prompt attacks, privilege misuse, and data exposure.Support Shadow AI discovery and enforcement using approved CASB/SWG, endpoint, and cloud controls.Conduct threat modelling and security testing for AI use cases before production release and following material changes.Track AI security findings, risks, exceptions, and remediation actions to closure; support risk acceptance where required.Produce AI security assessment reports, data exposure findings, control validation evidence, and maturity recommendations.Coordinate with AI Governance, Privacy, Legal, Data, Cloud, AppSec, SOC, and business owners.

Secondary Responsibilities

Support development of secure AI patterns, guardrails, standards, and reusable review checklists.Contribute to AI incident response playbooks and red-team exercises.Review third-party AI vendors, data processing terms, retention, and residency controls.Maintain awareness of NIST AI RMF, OWASP Top 10 for LLM Applications, ISO/IEC 42001, and emerging AI threats.

Any Other Responsibilities

Any other responsibilities assigned by the Line Manager in line with business and client requirements.

Skills / Certifications

Microsoft Azure security/AI certifications such as SC-100, AZ-500, AI-102 or equivalentCISSP, CCSP, or CISM (preferred)AI security or ML security training; OWASP LLM knowledgeCKS/Kubernetes or DevSecOps certification (advantage)

Soft Skills

Excellent written and verbal communicationAnalytical thinking and problem solvingAttention to detail and qualityAccountability and ownershipTeamwork and stakeholder collaborationAbility to prioritize and meet deadlinesAbility to work at client sites and provide after-hours support when required

Minimum Work Experience

3+ years of cybersecurity engineering experience, including cloud security, application security, or data security, with practical exposure to AI/ML or agentic AI platforms.

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering, or equivalent.Postgraduate qualification in Information/Cyber Security is an advantage.

Preferred Skill Set

Azure AI/OpenAI/ML security and cloud-native controlsIAM, managed identities, API security, secrets, and network isolationAI threat modelling, prompt injection testing, and secure RAG patternsDSPM, DLP, classification, and regulated data protectionPython/PowerShell, CI/CD, and security automation

GCS is acting as an Employment Business in relation to this vacancy.

Read less