AI Security Engineer
Smith & Nephew3 days ago
Pune, IndiaMid Level / Senior
Responsibilities
- Serve as the dedicated security engineer for assigned enterprise AI projects from design through deployment and operation.
- Perform threat modeling and security design reviews for web applications, AI agents, copilots, and integrations with enterprise data and systems.
- Define and validate security requirements for AI solutions built on Microsoft platforms.
- Assess proposed AI tools and architectures against approved tools and enterprise architecture capabilities.
- Identify and mitigate AI and agentic AI risks including prompt injection, data leakage, insecure tool use, MCP risks, and excessive permissions.
- Guide implementation of identity, access, data protection, network isolation, runtime protection, and least-privilege controls.
- Support secure development through code and configuration reviews, security testing, and remediation tracking.
- Coordinate penetration testing for AI applications and manage findings through closure.
- Use Microsoft security tooling to monitor AI workloads and support investigations.
- Maintain AI incident response runbooks and support handling of AI-related security events.
- Document security assessments, risks, and residual-risk decisions and contribute to AI security standards and reusable design patterns.
Requirements
- Bachelor’s degree in computer science, engineering, information systems, or equivalent experience.
- 4 to 7 years of experience in application security, cloud security, or security engineering, including hands-on experience securing cloud or AI-enabled applications.
- Expertise in cybersecurity, application security, cloud security engineering, risk management, and compliance.
- Understanding of AI, machine learning, generative AI, AI agents, and associated security risks.
- Hands-on experience with Microsoft Azure and Microsoft 365 security controls, including Microsoft Entra ID, Defender, Purview, and Sentinel.
- Familiarity with Microsoft Foundry, Azure OpenAI, Copilot Studio, Power Platform, agentic AI security, AI gateways, Prompt Shields, and Azure AI Content Safety.
- Experience securing web applications and APIs through threat modeling, secure code review, and security testing.
- Ability to translate security requirements into practical guidance for development, platform, data, privacy, and compliance teams.
- Experience working in Agile delivery environments and with cross-functional technology and security teams.
- Microsoft security or AI certifications preferred; CISSP, CISM, or equivalent preferred.
- Strong collaboration, communication, influencing, analytical problem-solving, decision-making, ownership, and judgment skills.
Benefits
- Major Medical coverage, educational assistance, and insurance benefits.
- Flexible personal/vacation time off, privilege leave, and floater leave.
- Parents and parents-in-law insurance, employee assistance program, and parental leave.
- Hybrid work model for most professional roles.
- Hands-on training, team-customized training, and mentorship.
- Free cab transportation for all employees and a one-time meal according to shift.
- Night shift allowances.
- Location: Kharadi, Pune, India.
About Smith & Nephew
Smith+Nephew is a global medical-technology company that designs and manufactures devices for orthopaedics, sports medicine, ENT, and advanced wound management. It sells implants, trauma fixation systems, arthroscopy instruments, surgical robotics (such as the CORI system), and wound dressings/therapies to hospitals and surgeons worldwide through direct sales and distributors. Founded in 1856 and headquartered in Watford, UK, it is a public company listed on the London and New York stock exchanges.