AI Identity, Authentication & Authorization

• Extend identity and access principles to non‑human identities and autonomous agents.
• Treat AI agents as first‑class identities, defining authentication, authorization, lifecycle management, and revocation.
• Implement delegated and “on‑behalf‑of” authorization patterns to distinguish human‑initiated actions from agent‑initiated actions.
• Apply least‑privilege and scope‑limiting controls to prevent privilege escalation in automated and multi‑agent workflows.

Threat Modeling & Risk Reduction

• Identify and mitigate AI‑specific risks including data leakage, prompt injection, jailbreaks, model abuse, data poisoning, model extraction, and AI supply‑chain risk.
• Ensure appropriate security testing and validation is embedded into AI development and deployment workflows.

Monitoring & Incident Readiness

• Define logging, monitoring, and detection requirements for AI systems, models, and agent activity.
• Partner with SecOps to ensure AI‑related events are observable, auditable, and actionable.
• Support incident response and post‑incident analysis for AI‑related security events.

Cross‑Functional Delivery

• Work closely with IAM, SecOps, AppSec, GRC, IT engineering, AI platform teams, and business stakeholders to embed security controls where they belong.

Data Security Engineering (Secondary – ~30%)

Data Protection & Governance

• Design and enhance enterprise data security controls with a focus on AI‑driven data access.
• Implement and optimize Microsoft Purview, including data classification, sensitivity labeling, DLP, information protection, and visibility.

AI‑Aware Data Security

• Ensure data security controls are aligned to AI architectures, reducing risk of sensitive data exposure via prompts, agents, outputs, and downstream sharing.
• Support secure use of enterprise data in RAG pipelines, AI workflows, and training environments.

Multi‑Platform Data Flows

• Contribute to data protection strategies across collaboration platforms, cloud services, and endpoints, ensuring consistent enforcement where possible.

• Provide day-to-day application support for iSeries-based systems used in manufacturing operations.
• Troubleshoot, analyze, and resolve issues related to RPGLE/CL, job failures, data anomalies, and performance concerns.
• Support production, planning, inventory, procurement, and logistics modules as part of the manufacturing IT ecosystem.
• Modify and enhance existing iSeries applications based on user requirements and business process changes.
• Monitor batch jobs and system health, proactively resolving issues to minimize downtime.
• Collaborate with business stakeholders, plant personnel, and cross-functional teams to identify and address system issues.
• Participate in on-call rotation and incident management procedures.
• Maintain and create technical documentation for code changes, support procedures, and system configurations.
• Assist in data extraction, integration, and reporting for operational and decision-making needs.

• Security Architecture: Design and implement application security architecture and processes, ensuring they align with industry best practices and regulatory requirements.

• Secure SDLC: Manage a risk-balanced SDLC by integrating threat modeling, secure code reviews, and security testing.

• Vulnerability Management: Identify, triage, and remediate security vulnerabilities through static and dynamic application security testing (SAST/DAST) and software composition analysis (SCA) tools.

• Security Assessments & Penetration Testing: Perform advanced penetration testing and red teaming across web, mobile, and cloud applications. Leverage exploit development techniques to identify high-risk vulnerabilities and collaborate with engineering teams for effective remediation.

• Secure Code Review: Analyze source code and provide security recommendations to developers to ensure adherence to secure coding best practices.

• Threat Modeling & Risk Analysis: Perform threat modeling to anticipate potential attack vectors and improve security architecture on complex or cross-functional components

• DevSecOps Enablement: Lead and enhance DevSecOps initiatives by identifying gaps and integrating security automation within CI/CD pipelines.

• Incident Response & Remediation: Lead security incident response related to applications and work with engineering teams to remediate threats.

• Security Awareness & Training: Develop and lead customized security training programs for engineering teams, focusing on OWASP Top 10, threat modeling, AI security risks, and secure coding principles.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field

• Minimum 5 years of software development or software security experience in an agile environment with strong expertise in software secure coding practices, threat modeling, and vulnerability assessment.

• Hands-on experience with SAST, DAST, IAST, and SCA tools (e.g., GitHub Advanced Security, Checkmarx, Fortify, Veracode, SonarQube, Burp Suite, ZAP).

• Deep knowledge of API security (e.g., OWASP API Top 10, GraphQL security).

• Experience in securing containerized applications (Docker, Kubernetes).

• Knowledge of supply chain security risks (e.g., SBOM, software dependency management).

• Familiarity with AI/ML security risks and adversarial machine learning techniques.

• Experience with Infrastructure as Code (IaC) security (Terraform, CloudFormation).

• Fluent in one or more programming languages, such as Python, Java, JavaScript

• Strong knowledge of secure coding principles and application security frameworks.

• Familiarity with security tools (e.g., static and dynamic analysis tools, vulnerability scanners).

• Understanding of security standards and regulations (e.g., OWASP, NIST).

• Hands-on experience securing AI/ML applications, understanding adversarial attacks, model poisoning, and data privacy risks. Strong eagerness to learn and contribute to AI security advancements.

• Experience with cloud security best practices in AWS, Azure, or GCP.

• Experience with AI security best practices and implementations.

• Strong work ethic with a commitment to meeting business needs and effectively collaborating with global colleagues.

• Effective interpersonal skills; ability to collaborate successfully with both technical and non-technical stakeholders.

• Strong ability to balance security risk with business impact and communicate trade-offs effectively.

• Experience mentoring junior engineers and leading security champions within development teams.

• Ability to articulate complex technical concepts with clarity, supported by effective written and verbal communication skills.

· Design, plan and implement network IT Infrastructure for Transformation / Integration / Segregation throughout Food and Environment testing businesses across Europe. These projects will be aimed to perform installations, configuration and migrations of enterprise-level network IT infrastructure systems from legacy to the new solutions

· Propose and deliver solutions that best meet the business needs in terms of security, cost and bandwidth

· Work close with Server, Cloud, Application team members do deliver the IT Infrastructure as wider project. Act based on the end to end view of the Infrastructure

· Document the solutions delivered and help to transition the service to regional teams in final stage of the project

· Act as L3/L4 point of contact after the Infrastructure Service is transitioned to the target teams

REQUIRED SKILLS:

An ideal candidate should have strong 5+ years experience in all of the below:

· Experience in Network infrastructure design and build

· Network components maintenance experience (upgrades etc)

· Firewalls (ideally Fortigate, Checkpoint)

· Data centre network experience

· Cisco or Fortinet based routing and switching (CCNA level)

o Knowledge of protocols: IP, SNMP, SMTP, OSPF, VLAN

o ACLs

o Static routing

· SDWAN (ideally Velocloud or Fortigate)

· Switch stacking

· Experience of complex network migrations

· Cisco wireless experience

· Ability to read, understand and create technical documentation of the delivered solutions

· Collaborative team player

Below skills will be an advantage:

· CCNP level

· Ideally a proven track of LAN/WAN/SDWAN network infrastructure design and implementation during acquisitions, transitions and delivery on enterprise level

· Experience with protocols like: DNS, DHCP, NTP, HTTP, BGP

· VOIP

· QoS

· Network monitoring

· Load Balancing

· VPN (ideally Pulse Secure)

· Data centre network experience

· Experience in complex network migrations

· Cloud Networking