AI Security Engineer
Smith & Nephew3 days ago
Pune, IndiaMid Level / Senior
Responsibilities
- Serve as the security engineer for assigned enterprise AI projects from design through deployment and operation.
- Perform threat modeling and security design reviews for web applications, AI agents, copilots, and enterprise integrations.
- Define and validate security requirements for solutions using Microsoft platforms and AI services.
- Assess proposed AI tools and architectures against approved tools and enterprise architecture capabilities.
- Identify and mitigate AI and agentic AI risks, including prompt injection, data leakage, insecure tool use, MCP risks, and excessive permissions.
- Guide identity, access, data protection, network isolation, agent permission, and least-privilege controls.
- Implement or validate AI runtime protections such as AI gateways, Azure API Management, Prompt Shields, and Azure AI Content Safety.
- Conduct code and configuration reviews, security testing, remediation tracking, and penetration-test coordination.
- Use Microsoft Defender for Cloud and Microsoft Sentinel to monitor workloads and investigate security issues.
- Own AI incident-response runbooks and support handling of AI-related security events.
- Document assessments, risks, residual-risk decisions, standards, secure design patterns, and project guidance.
Requirements
- Bachelor’s degree in computer science, engineering, information systems, or equivalent experience.
- 4 to 7 years of experience in application security, cloud security, or security engineering, including hands-on work securing cloud or AI-enabled applications.
- Experience with cybersecurity, application security, cloud security engineering, risk management, and compliance.
- Understanding of AI, machine learning, generative AI, AI agents, and related security risks.
- Hands-on experience with Microsoft Azure and Microsoft 365 security controls, including Microsoft Entra ID, Defender, Purview, and Sentinel.
- Familiarity with Microsoft Foundry, Azure OpenAI, Copilot Studio, Power Platform, and their security configuration requirements.
- Understanding of agentic AI security, agent identities and permissions, MCP and tool security, AI gateways, Prompt Shields, and Azure AI Content Safety.
- Experience securing web applications and APIs through threat modeling, secure code review, and security testing.
- Ability to translate security requirements into practical guidance for development, platform, data, privacy, and compliance teams.
- Experience working in Agile delivery environments and cross-functional technology and security initiatives.
- Microsoft security or AI certifications, CISSP, CISM, or equivalent certifications are preferred.
- Strong collaboration, communication, influencing, analytical problem-solving, decision-making, ownership, and adaptability skills are expected.
Benefits
- Hybrid work model for most professional roles.
- Major medical coverage and educational assistance.
- Flexible personal/vacation time off, privilege leave, and floater leave.
- Parents and parents-in-law insurance, employee assistance program, and parental leave.
- Hands-on, team-customized training and mentorship.
- Free cab transportation for all employees and one meal per shift.
- Night shift allowances.
About Smith & Nephew
Smith+Nephew is a global medical-technology company that designs and manufactures devices for orthopaedics, sports medicine, ENT, and advanced wound management. It sells implants, trauma fixation systems, arthroscopy instruments, surgical robotics (such as the CORI system), and wound dressings/therapies to hospitals and surgeons worldwide through direct sales and distributors. Founded in 1856 and headquartered in Watford, UK, it is a public company listed on the London and New York stock exchanges.