AI Security Consultant

atPA ConsultingRemote

United Kingdom Full-time Cybersecurity / Security EngineerMid-levelSenior

Posted Aug 6

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Perform cyber security evaluations across technology infrastructures, cloud systems, applications, networks, identity platforms, and operational workflows.

• Analyze security architectures and provide practical recommendations that align with business risks.

• Assist in the design and implementation of controls for access management, data protection, logging and monitoring, vulnerability management, incident response, and third-party risk.

• Aid clients in interpreting security requirements, evaluating control maturity, and formulating enhancement roadmaps.

• Convert technical findings into business-relevant insights for senior stakeholders.

• Evaluate risks associated with AI-enabled applications, LLM integrations, AI agents, autonomous workflows, and model-connected business processes.

• Review AI designs for vulnerabilities such as prompt injection, excessive agency, data leakage, insecure tool usage, unsafe outputs, model supply chain exposure, and insufficient human oversight.

• Conduct threat modeling for agentic systems and their tool, API, data, decision, and action flows.

• Provide guidance on secure AI application patterns, permission boundaries, identity controls, sandboxing, auditability, validation, and human-in-the-loop controls.

• Assist in establishing AI governance and assurance throughout the lifecycle.

• Identify secure applications of AI in alert triage, threat intelligence, incident summarization, detection engineering, reporting, vulnerability prioritization, and control testing.

• Assess AI-enabled security tools and design responsible AI-augmented security workflows.

• Create playbooks, guardrails, and operational models for AI in SOC, GRC, vulnerability management, and incident response.

• Evaluate the effectiveness, limitations, and risks of AI-assisted security processes.

⛳️ Requirements

• Strong experience in cyber security consulting, security architecture, risk management, or security operations.

• Solid understanding of identity and access management, cloud security, application security, data protection, vulnerability management, incident response, and security monitoring.

• Capability to assess technical environments and provide clear, prioritized recommendations.

• Experience in engaging with technical teams and senior business stakeholders.

• Familiarity with AI, generative AI, or LLM-enabled systems and their interactions with data, prompts, APIs, tools, and users.

• Awareness of AI security risks such as prompt injection, sensitive information disclosure, excessive agency, insecure output handling, model/data poisoning, vector or embedding weaknesses, and AI supply chain risk.

• Proficiency in threat modeling for complex, AI-assisted, or agentic workflows.

• Excellent written and verbal communication skills.

• Background in AI governance, responsible AI, model risk management, or AI assurance.

• Familiarity with NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls, or cloud security frameworks.

• Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence, or incident response.

• Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases, or automation/orchestration tools.

• Experience designing guardrails for autonomous systems.

• Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer/Auditor, cloud security certifications, or AI/security-focused training.

• Must pass background checks and meet the Baseline Personnel Security Standard.

• Some UK roles necessitate UK security clearance and a minimum of 5 years of continuous UK residency; applicants should be British citizens or have resided in the UK for the past 5 years.