AI Security Engineer

Job Title: AI Security Engineer
Type: Contract 1 year renewable
Sub-Business Unit: Technology Assurance
Location / Coverage: Abu Dhabi

Engineer and validate security controls for AI/ML and agentic AI services used by the organization, including Azure AI Services, Azure OpenAI, Azure Machine Learning, AI-enabled applications, and third-party AI platforms. The role protects sensitive and regulated data, identities, models, APIs, integrations, and AI infrastructure throughout the AI lifecycle.

• Maintain an inventory of AI/ML assets, models, inference endpoints, agents, connectors, plugins, training pipelines, and supporting infrastructure.
• Perform security reviews for Azure OpenAI, Azure AI Foundry/Services, Azure Machine Learning, and approved third-party AI services.
• Assess authentication, authorization, managed identities, service principals, API keys, secrets, network exposure, and rate-limiting controls.
• Implement and validate least-privilege RBAC, private endpoints, firewall rules, network isolation, encryption, and secure secret storage.
• Assess AI data flows for PII/PHI and confidential data exposure across prompts, outputs, RAG repositories, connectors, and training datasets.
• Configure or validate content safety filters, prompt guardrails, custom block lists, and abuse-prevention controls.
• Test for prompt injection, jailbreaks, insecure output handling, excessive agency, data leakage, model misuse, and integration abuse.
• Review model registry permissions, model/version integrity, dependency provenance, and AI supply-chain security.
• Develop AI-specific logging, monitoring, and detection use cases for anomalous API activity, prompt attacks, privilege misuse, and data exposure.
• Support Shadow AI discovery and enforcement using approved CASB/SWG, endpoint, and cloud controls.
• Conduct threat modelling and security testing for AI use cases before production release and following material changes.
• Track AI security findings, risks, exceptions, and remediation actions to closure; support risk acceptance where required.
  
  Produce AI security assessment reports, data exposure findings, control validation evidence, and maturity recommendations.
• Coordinate with AI Governance, Privacy, Legal, Data, Cloud, App Sec, SOC, and business owners.

• Support development of secure AI patterns, guardrails, standards, and reusable review checklists.
• Contribute to AI incident response playbooks and red-team exercises.
• Review third-party AI vendors, data processing terms, retention, and residency controls.
• Maintain awareness of NIST AI RMF, OWASP Top 10 for LLM Applications, ISO/IEC 42001, and emerging AI threats.

• Any other responsibilities assigned by the Line Manager in line with business and client requirements.

• Microsoft Azure security/AI certifications such as SC-100, AZ-500, AI-102 or equivalent
• CISSP, CCSP, or CISM (preferred)
• AI security or ML security training; OWASP LLM knowledge
• CKS/Kubernetes or Dev Sec Ops  certification (advantage)

• Excellent written and verbal communication
• Analytical thinking and problem solving
• Attention to detail and quality
• Accountability and ownership
• Teamwork and stakeholder collaboration
• Ability to prioritize and meet deadlines
• Ability to work at client sites and provide after-hours support when required

• 3+ years of cybersecurity engineering experience, including cloud security, application security, or data security, with practical exposure to AI/ML or agentic AI platforms.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering, or equivalent.
• Postgraduate qualification in Information/Cyber Security is an advantage.

• Azure AI/OpenAI/ML security and cloud-native controls
• IAM, managed identities, API security, secrets, and network isolation
• AI threat modelling, prompt injection testing, and secure RAG patterns
• DSPM, DLP, classification, and regulated data protection
• Python/Power Shell, CI/CD, and security automation

GCS is acting as an Employment Business in relation to this vacancy.