devsecops engineer

THE CROWN ESTATE

<div>Advert Closes: Monday 13th July
Are you an Azure Platform Engineer ready to build cloud foundations that shape a national portfolio?
At The Crown Estate, we&rsquo;re not just managing land and property, we&rsquo;re shaping the future of some of the UK&rsquo;s most iconic places and strategic assets. From central London destinations to offshore wind, our work delivers long-term value for the nation.
We&rsquo;re now looking for an experienced Azure Platform Engineer to play a pivotal role in modernising our cloud platform, embedding security, resilience, and automation at the core of everything we do.
What you&rsquo;ll be doing
As a key member of our Infrastructure &amp; Platform team, you&rsquo;ll design and deliver secure, scalable Azure solutions, driving excellence through DevSecOps and cloud best practices.
You&rsquo;ll:<ul><li>
Architect Azure solutions aligned to Zero Trust and Well-Architected Framework principles</li><li>
Design and support Azure integration patterns and services, enabling secure, reliable, and scalable connectivity across platform and data workloads</li><li>
Design and manage Azure environments across networking, storage, and compute</li><li>
Embed DevSecOps practices across design, build, and handover</li><li>
Implement security and governance using RBAC, PIM, Azure Policy, Defender for Cloud, and Sentinel</li><li>
Build and automate infrastructure using Bicep and/or Terraform</li><li>
Optimise platform services like API Management, Key Vault, Service Bus, and Event Grid</li><li>
Drive observability and proactive operations using Azure Monitor, Log Analytics, and App Insights</li><li>
Shape resilience strategies including autoscaling, high availability, and disaster recovery</li></ul>
What you&rsquo;ll bring
We&rsquo;re looking for someone who combines deep technical expertise with a security-first mindset and a passion for modern cloud engineering.
You&rsquo;ll have:<ul><li>
Excellent hands-on experience designing and delivering Azure-based solutions</li><li>
Expertise in cloud security, governance, and Zero Trust principles</li><li>
Experience with Azure networking and hybrid connectivity</li><li>
Proven capability in Infrastructure as Code and CI/CD (Bicep/Terraform, Azure DevOps)</li><li>
Knowledge of monitoring, logging, and operational excellence frameworks</li><li>
A collaborative approach, with the ability to clearly communicate technical decisions</li></ul>
Bonus points for:<ul><li>
FinOps or cost optimisation experience</li><li>
AKS or container orchestration knowledge</li><li>
Azure Solutions Architect Expert certification</li></ul>
Why The Crown Estate?
This is more than just a platform role, it&rsquo;s an opportunity to:<ul><li>
Work on high-impact, nationally significant technology initiatives</li><li>
Influence the direction of a modern, secure cloud platform</li><li>
Be part of an organisation with a strong purpose, sustainability focus, and long-term vision</li><li>
Collaborate in a culture that values innovation, integrity, and continuous improvement</li></ul>
What success looks like
You&rsquo;ll thrive here if you:<ul><li>
Champion security-first design and automation</li><li>
Care deeply about resilience, scalability, and operational excellence</li><li>
Enjoy solving complex problems with structured thinking</li><li>
Work collaboratively across teams in Agile and DevOps environment</li></ul>
Ready to build something that lasts?
If you&rsquo;re passionate about Azure, driven by best practices, and motivated by meaningful impact, we&rsquo;d love to hear from you.
Our Offering / benefits:
As well as a competitive salary, pension and performance related bonus offering, we have a wealth of benefits available ranging from flexible working; market leading family policies and shopping discounts in the West End, to private healthcare; life and critical illness cover and 28 days holiday with the option to buy more. We value work life balance and your wellbeing highly, enabling you to be your best self to work.
Disability Disclaimer:
We are a proud disability confident employer and operate the offer of interview scheme Disability Confident employer scheme - GOV.UK (www.gov.uk).
We are happy to offer alternative application methods or formats and can be flexible on our process to enable you to have the best opportunity.
If you have any questions about our recruitment process or would like to talk about adjustments, please contact us directly, or at careers@thecrownestate.co.uk
Please note that if we receive a high volume of applications, we may close this advert early. We encourage you to apply as soon as possible.</div>

Azure Platform Engineer

Harness

<div><div>Harness is the AI Software Delivery Platform company, led by technologist and entrepreneur Jyoti Bansal (founder of AppDynamics, acquired by Cisco for $3.7B). Harness has raised approximately $570M in funding and is valued at $5.5B, backed by leading investors including Goldman Sachs, Menlo Ventures, IVP, Unusual Ventures, Citi Ventures, and more. As AI accelerates code creation, the real bottleneck has shifted to everything after the code &ndash; testing, deployments, application security, reliability, compliance, and cost optimization. Harness brings AI and automation to this &ldquo;outer loop,&rdquo; helping teams ship software faster while maintaining security and governance throughout the entire software delivery lifecycle.

Powered by Harness AI and the Software Delivery Knowledge Graph, the Harness Platform applies deep context and intelligent automation across the software delivery lifecycle with governance and policy-driven controls embedded throughout the platform.

Over the past year, Harness powered over 185M deployments, 82M builds, 18T flag evaluations, 8M security scans, 9.1B optimized tests, 3T protected API calls, and helped manage $2.8B in cloud spend &mdash; enabling customers like United Airlines, Morningstar, and Choice Hotels to accelerate releases by up to 75%, reduce cloud costs by up to 60%, and achieve 10x DevOps efficiency.

With a global team across 26 offices and 27 countries, Harness is shaping the future of AI software delivery &mdash; and we&rsquo;re looking for exceptional talent to help us move even faster.</div><div><h3 class="jobSectionHeader">
Position Summary</h3>
<div>
In this role, you will be working with internal and external stakeholders to architect, design and implement FinOps, IaC, and DB solutions for enterprise customers. You will have an opportunity to work with Harness Engineering and various customer functions, such as DevOps, SRE, Cloud, Finance and Engineering Analytics teams. You will develop best practices and automations to streamline Harness platform deployments in the most efficient, scalable, repeatable and reliable manner possible. We're a high-growth company on a once-in-a-lifetime journey to revolutionize engineering deployment tools &amp; continuous delivery.

In this role, you will partner closely with enterprise customers across EMEA to architect, design, and implement DevSecOps, FinOps, and Engineering Excellence solutions using the Harness platform.

You will collaborate with Harness Engineering, Sales Engineering, and Customer Success, as well as customer teams including DevOps, SRE, Platform Engineering, Cloud Infrastructure, Finance, and Engineering Leadership. Your mission is to help customers modernize and scale their CI/CD practices in a way that is secure, cost-efficient, reliable, and aligned with business outcomes.

This is a hands-on, customer-facing role in a high-growth global SaaS company, supporting organizations as they evolve their cloud-native and Kubernetes adoption across AWS, GCP, and Azure.
</div>
<h3 class="jobSectionHeader">About The Role</h3>
<div><ul><li>Engage directly with customer technical teams to assess and understand existing processes and DevSecOps, CI/CD pipelines and governance models.</li>
<li>Architect and implement an optimized Harness setup for integration, scale, and repeatability</li>
<li>Interface with the Customer's Executive and Leadership teams to understand the technical goals and business objectives related to their processes, design their Harness implementation to best fit those requirements, and correlate the technical success criteria to the business requirements</li>
<li>Provide positive anecdotes from each engagement, craft best practices around Customer implementations, convert them into automation and create reference patterns</li>
<li>Document and implement processes and solutions that are employed for onboarding success for the purpose of internal enablement</li>
<li>Contribute to the product design, assist in the Harness Community, and for building out of an advanced technical knowledge base</li>
<li>Consult on DevSecOps, cloud-native CI/CD and Kubernetes</li>
<li>Interact with customers on a professional, meaningful and technically deep level</li>
<li>Define current-state vs. target-state architecture and a phased onboarding and adoption roadmap spanning CI/CD, IaC, security and reliability.</li>
<li>Provide forward-looking technical direction aligned with both customer needs and platform evolution.</li>
<li>Author and standardize design patterns (reusable pipeline templates, deployment strategies, golden paths) and integration blueprints to SCM, cloud, artifact registries, secret managers, identity, ITSM, and observability.</li>
<li>Guide and oversee execution across implementation engineers and delivery partners.</li>
<li>Drive onboarding and adoption across multiple teams and business units.</li>
<li>Deliver hands-on implementation across CI/CD, infrastructure-as-code, supply-chain security, the internal developer portal, database DevOps, and site reliability.</li>
<li>Partner with Customer Success and account teams to drive adoption, growth, and long-term customer success</li>
<li>Work closely with Pre-sales and Post-sales teams to ensure that Harness customers are successful and experience a high level of customer satisfaction with the Harness solution</li>
</ul></div><h3 class="jobSectionHeader">About You</h3>
<div><ul><li>BA/BS degree in CS or Computer Engineering-related field with 8+ years in consulting roles / software delivery / DevSecOps / Platform Engineering</li>
<li>You have a strong consulting attitude and a commercial acumen in delivering custom solutions to customers of all sizes, stakeholder management, workshop facilitation, and customer-facing communication are part of your DNA.</li>
<li>Your written and verbal communication are exceptional - You are able to present to a platform engineer team as well as a CxO with equal confidence.</li>
<li>You have experience driving engineering culture change in large enterprises - such as onboarding and adoption of new tooling, processes, and ways of working at scale.</li>
<li>You are a results-driven individual with a hunger for accomplishing in fast paced environments and a knack for optimizing processes</li>
<li>You have a proven ability to work with cross-functional, distributed teams.</li>
<li>You are a perpetual learner, thrive in a team setting, enjoy sharing your experience and solutions, consistently pursuing excellence and success in all your tasks, detail-oriented and analytical, with excellent written and verbal communication skills.</li>
<li>You are familiar with architecture frameworks (TOGAF or equivalent) and Well-Architected reviews (AWS/Azure/GCP)</li>
<li>You have proven hands-on experience leading migrations from incumbent tooling to a modern, consolidated delivery platform - including continuous delivery (e.g., IBM UrbanCode Deploy / UCD), continuous integration (e.g., Jenkins), and infrastructure-as-code management (e.g., Terraform Cloud / HCP Terraform).</li>
<li>Willingness to travel up to 25%</li>
<li>Last but not least, you have deep hands-on experience in at least 3 of the areas listed below, with working knowledge of the rest:</li>
<ul><li>CI/CD &amp; pipelines: GitLab CI/CD, GitHub Actions, Jenkins, Azure DevOps, CircleCI, GitOps principles with Argo CD/Workflows, Tekton, Buildkite, Bamboo, TeamCity, AWS CodePipeline.</li>
<li>Policy-as-Code &amp; governance: OPA/Rego, HashiCorp Sentinel, Kyverno.</li>
<li>SSO &amp; identity: Okta, Azure AD/Entra ID, OneLogin, Keycloak, LDAP, SAML/OIDC.</li>
<li>Infrastructure as Code (IaC): Terraform, OpenTofu, Pulumi, AWS CloudFormation, Azure ARM/Bicep, Crossplane, Ansible - plus IaC orchestration/management such as Terraform Cloud / HCP Terraform, Spacelift, env0, Scalr, Terragrunt, Atlantis, AWS Proton</li>
<li>IaC security scanning: Checkov, Wiz, Snyk IaC, Checkmarx, Terrascan</li>
<li>Application security testing: SonarQube, Checkmarx, Veracode, Semgrep, Trivy, Grype, GitGuardian</li>
<li>Internal developer portals &amp; platform engineering: Backstage, Cortex, Roadie, Kratix, Port, OpsLevel, Atlassian Compass, Configure8, Humanitec - with hands-on catalog modeling, golden-path scaffolding, and scorecards</li>
<li>Environment management &amp; deployment: Argo CD, Flux, Spinnaker, Octopus Deploy, IBM UrbanCode Deploy, Codefresh; ephemeral / on-demand environments (Bunnyshell, Qovery, Release.com, Garden, Okteto, Signadot); configuration management with Ansible, Puppet, Chef, Saltstack in conjunction with Helm and Kustomize usage</li>
<li>Database DevOps: Liquibase, Flyway (incl. Redgate Flyway), Bytebase, Atlas (Ariga), Sqitch, SchemaHero, Redgate SQL Change Automation, DBmaestro</li>
<li>Site reliability &amp; incident response (incl. AI-assisted): incident management and postmortems (PagerDuty, Opsgenie, incident.io, Rootly, FireHydrant, Blameless); AIOps / AI SRE (Resolve.ai, Cleric, Traversal, Neubird, Datadog Bits AI, BigPanda, Moogsoft)</li>
<li>Observability Datadog, Prometheus/Grafana, New Relic, Splunk, Dynatrace, Honeycomb, OpenTelemetry</li>
<li>Containers, cloud &amp; foundations: Docker and Kubernetes (Helm, manifests, operators) on EKS/AKS/GKE; depth in at least one of AWS/Azure/GCP (IAM, networking, managed services); secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, CyberArk)</li>
<li>Scripting, languages &amp; OS: Linux, Bash, Python (or Go), PowerShell</li>
<li>ITSM: ServiceNow, Jira</li>
</ul></ul></div><div><h3 class="jobSectionHeader">Work Location</h3>
<ul><li>UK, London. Travel is roughly 25% throughout the calendar year.</li>
</ul><h3 class="jobSectionHeader">What You Will Have At Harness</h3>
<ul><li>Comprehensive healthcare benefits</li>
<li>Flexible work schedule</li>
<li>Paid Time Off and Parental Leave</li>
<li>Monthly, quarterly, and annual social and team building events</li>
<li>Monthly internet reimbursement</li>
<li>Quarterly Harness TGIF-Off / 4 days</li>
</ul>
Factors that may be used to determine your actual pay rate include your specific skills, experience, qualifications, location, and comparison to other employees already in this role. In addition to the base salary, certain roles may qualify for a performance-based incentive and/or equity, with eligibility depending on the position. These rewards are based on a combination of company performance and individual achievements.
</div></div><div><h3 class="jobSectionHeader">
Harness In The News:</h3>
<ul>
</ul>All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin.

At Harness, we care about your privacy and are committed to protecting your personal data. For additional information on this topic, you can visit our privacy Portal:
Note on Fraudulent Recruiting/Offers

We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of Harness. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers.

Please note, we do not ask for sensitive or financial information via chat, text, or social media, and any email communications will come from the domain @harness.io. Additionally, Harness will never ask for any payment, fee to be paid, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations.

If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Harness, please do not provide any personal or financial information and contact us immediately at . You can also find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission&rsquo;s website (, or you can contact your local law enforcement agency.</div></div><div></div>

Staff Implementation Engineer

Resolution

<div><h1 class="jobSectionHeader">About Resolution</h1>
Resolution does research on how to align artificial superintelligence (ASI). ASI may be developed in the next few years, but it is unclear whether alignment is on track to be ready in the same timeframe. We aim at higher a priori confidence in aligned outcomes by pursuing a portfolio of theory and empirics bets, any one of which &mdash; if it succeeds &mdash; would meaningfully advance the field. We invest heavily in research automation to accelerate progress, and we believe that stronger alignment theory unlocks higher automation: more principled approaches give us better filters for which directions of automated research are promising.
Resolution was founded in 2026 by researchers from UK AISI's Alignment Team, who ran the &pound;30m Alignment Project, and Timaeus, who pioneered applying singular learning theory to alignment.
For more information, see our announcement.<h1 class="jobSectionHeader">
About the Team</h1>
Resolution's work will involve sensitive frontier-relevant research and partnerships with AI labs. This role exists both to protect that work and to enable it: good security is what makes deeper lab partnerships possible. We draw a distinction between two closely related areas of security:<ul><li>
Research &amp; infrastructure security. Securing how research actually runs: CI/CD pipelines, automated research agents, multi-cloud compute, and code/data/model-weight handling.</li><li>
Corporate IT &amp; security. The endpoint, identity, and collaboration scaffolding a distributed research org runs on, in combination with the compliance frameworks that unlock lab partnerships.</li></ul>
This role focuses on the former, covering security on the technical side of the organization. You would report to senior leadership and work closely with our security and engineering teams (as well as with our operations team).
In practice, we expect to grow the security team one hire at a time, so your initial set of responsibilities is likely to span both areas. We expect the distinction to clarify over time.<h2 class="jobSectionHeader">
About the Role</h2>
You are the security architect for our research pipeline. You'll define how we securely conduct research across multiple cloud environments, partnering closely with engineering to make CI/CD, automated research agents, and large-scale compute secure by default. You would build a hardened environment where researchers and agents iterate at speed without risking data leakage, supply-chain compromise, and other security failures.<h2 class="jobSectionHeader">
Responsibilities</h2>
1. Secure DevSecOps &amp; CI/CD Orchestration<ul><li>
Pipeline Hardening: Build security guardrails directly into our CI/CD pipelines. Ensure that every deployment, whether manual or agent-driven, is automatically scanned, verified, and compliant.</li><li>
Automated Verification: Establish workflows where our agents can test their own code and infrastructure changes against security policies before deploying to production environments.</li><li>
Infrastructure as Code (IaC): Lead the implementation of &quot;Compliance as Code.&quot; Automate the auditing and enforcement of security configurations across our AWS, GCP &amp; neocloud footprints.</li></ul>
2. Supply Chain Security for Automated Research<ul><li>
Provenance and Integrity: In an environment where we rely heavily on automated coding agents, build systems to ensure the provenance of code and dependencies. Implement robust signing, SBOM (Software Bill of Materials) generation, and automated vulnerability management.</li><li>
Agent Sandbox Security: Define and enforce security models for our research agents. Ensure that agents have the &quot;least privilege&quot; access required to execute experiments while remaining isolated from sensitive IP and credentials.</li></ul>
3. Multi-Cloud Research Infrastructure<ul><li>
Compute Security: Manage the security architecture for our high-compute research environments. We operate in a multi-cloud ecosystem; you will be responsible for consistent, zero-trust network segmentation and identity management across disparate cloud providers.</li><li>
Research Data Protection: Develop and maintain the data handling protocols necessary for working with pre-publication research and potentially sensitive model weights.</li></ul>
4. Enabling Frontier Access<ul><li>
Compliance as a Competitive Advantage: Partner with AI labs to navigate security audits. You will bridge the gap between our &quot;move fast&quot; research culture and the high-bar security requirements of frontier model providers, turning compliance into an accelerator for our research agenda.</li></ul><h2 class="jobSectionHeader">
You May Be a Good Fit If You</h2><ul><li>
Are a seasoned security engineer who writes code, with deep experience in Terraform, Kubernetes, and CI/CD tools (GitHub Actions, GitLab CI).</li><li>
Have managed security across multiple cloud providers (AWS / GCP / neoclouds) and understand the nuance of securing ephemeral, high-compute research clusters.</li><li>
Take a pragmatic approach to modern software supply chains and understand the unique risks of AI-driven development and how to mitigate them without killing velocity.</li><li>
Understand the threat model of a high-value target for state-level actors and IP theft, and can build systems robust against sophisticated adversaries.</li><li>
Can explain complex security trade-offs to lead researchers and scientists, saying &quot;yes, safely&quot; rather than just &quot;no.&quot;</li><li>
Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled!</li><li>
Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full-time.</li></ul><h2 class="jobSectionHeader">
Why This Role is Unique</h2>
At this organization, &quot;Corporate Security&quot; is a separate function. This role is focused on the Research Infrastructure. You will be working at the frontier of how automated alignment research is actually done. You will be building the security primitives for a new way of doing science: one where humans and machines collaborate to solve the most important problem of the 21st century.<h1 class="jobSectionHeader">
Logistics</h1>
Salary: Your salary depends on the scope, autonomy, and impact we expect you to have while working at Resolution. The expected range of in-person salaries for this role is:<ul><li>
L4 (SWE II): $346,000
</li><li>L5 (Senior SWE): $451,000
</li><li>L6 (Staff SWE): $670,000
</li><li>L7 (Senior Staff SWE): $930,000
</li></ul>We level using an internal adaptation of Google's standard levelling; the band above is indicative of where a strong candidate might come in.
Location: Berkeley, California. Remote may be considered in exceptional cases.
Benefits:<ul><li>
5 weeks of paid vacation per year, in addition to public holidays.</li><li>
Comprehensive healthcare insurance (medical, dental, vision).</li><li>
Unlimited sick leave to prioritize your well-being.</li><li>
An unconditional 401(k) contribution equal to 4% of your salary.</li></ul>
Visa sponsorship: We can sponsor visas for relocation to Berkeley.
Minimum education: A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience that demonstrates comparable knowledge.
Deadline: Applications are rolling &mdash; please apply ASAP. We'll respond to applications within one week of receipt.
Start date: ASAP.
Compensation Range: $346K - $930K</div>

Security Engineer (Research Infrastructure)

Cognism

<div><div><h2 class="jobSectionHeader">WHO ARE WE</h2>

Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</div>
THE ROLE

The Senior Application Security Engineer is a key member of Cognism's Information Security Team, reporting into the Application &amp; Infrastructure Security Manager. Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.

You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception &ndash; all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.

This role is ideal for a senior IC who is technical, collaborative, and pragmatic, with the ability to influence engineering teams while driving hands on improvements to Cognism's secure SDLC.

KEY RESPONSIBILITIES

Security by Design &amp; Product Integration
<ul>
<li>Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</li>
<li>Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li>Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.</li>
</ul>
Application Risk Assessment &amp; AI Security
<ul>
<li>Identify and assess application risks across Cognism's SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</li>
<li>Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li>Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.</li>
</ul>
Secure SDLC &amp; DevSecOps Enablement
<ul>
<li>Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</li>
<li>Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li>Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.</li>
</ul>
Threat Modelling &amp; Architecture Support
<ul>
<li>Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</li>
<li>Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li>Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li>Maintain and expand Cognism's secure coding standards, guidance, and reusable security patterns.</li>
</ul>
Application Security Testing &amp; Engineering
<ul>
<li>Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</li>
<li>Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li>Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.</li>
</ul>
Collaboration, Education &amp; Influence
<ul>
<li>Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape.</li>
<li>Deliver security training, workshops, and guidance to improve engineering teams' security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.</li>
</ul>
CORE COMPETENCIES
<ul>
<li>Strong technical depth in application security, cloud security, and secure development.</li>
<li>Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li>Deep understanding of communication protocols used for web development is a must-have.</li>
<li>Hands on experience with web application development, specifically for back-end development is a must-have competency.</li>
<li>Risk-Based Prioritization: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a &quot;risk-driven&quot; rather than &quot;compliance-driven&quot; mindset. Comfortable balancing security risk with product and commercial realities.</li>
<li>Contextual Communication: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</li>
<li>Collaborative Conflict Resolution: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.</li>
<li>Architectural Empathy: Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</li>
</ul>
EDUCATION &amp; EXPERIENCE
<ul>
<li>5&ndash;10+ years of experience in Application Security, Product Security, or Security Engineering roles.</li>
<li>Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines.</li>
<li>Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li>Experience working closely with engineering and product teams in agile environments.</li>
<li>Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li>Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li>Experience in SME or high-growth SaaS environments preferred.</li>
</ul><div>
<h2 class="jobSectionHeader">WHY COGNISM</h2>

At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you're looking for a place where your work truly makes an impact, you're in the right spot!

Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.

Here's what we stand for:

 We Own the Outcome Together. 
 We Deeply Understand our Customers. 
 We Celebrate Impact Wherever It Comes From.

At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</div></div>

Senior Application Security Engineer

JPMorganChase

<div>JOB DESCRIPTION 
 
 
Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start.
Job Summary:
As a Senior DevSecOps Architect in the Cybersecurity &amp; Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the DevSecOps strategy as well as embedding automated security controls into CI/CD pipelines. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.
Job Responsibilities:
<ul><li>Pipeline Security Architecture - Design, implement, and continuously improve security architecture for CI/CD pipelines and DevOps toolchains, ensuring automated security checks are embedded at every stage from code commit to production deployment.</li>
<li>Security-as-Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments.</li>
<li>Threat Modeling &amp; Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive adoption of secure design patterns.</li>
<li>Automated Guardrails at Scale - Design and deploy automated preventive and detective guardrails to proactively reduce risk across CICD pipelines, cloud and SaaS environments.</li>
<li>Security Culture &amp; Enablement - Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.</li>
<li>Risk &amp; Issue Management - Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to DevSecOps and Change Management.</li>
<li>Stakeholder Partnership - Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.</li>
<li>Audit &amp; Regulatory Support - Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.</li>
<li>Continuous Improvement - Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in DevSecOps maturity across the organization.</li>
</ul>Required Qualifications, Capabilities, and Skills:
<ul><li>Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CICD Pipelines and toolchains.</li>
<li>Expert ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.</li>
<li>Hands-on security expertise in AWS and GCP.</li>
<li>Practical experience creating reference architectures and patterns for engineering teams.</li>
<li>Proven ability to design and deploy automated preventive and detective guardrails at scale.
</li><li>Expertise in leveraging IaC scanning to detect misconfigurations and compliance violations across Terraform and Kubernetes manifests</li>
<li>Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions</li>
<li>Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security.</li>
<li>Ability to solve design and functionality problems independently.</li>
<li>Strong written and verbal communication skills.</li>
<li>Demonstrated success in influencing peers and stakeholders.</li>
<li>Ability to evaluate and recommend emerging technologies for future state architecture.</li>
</ul>Preferred Qualifications, Capabilities, and Skills:
<ul><li>Shift-Left/Start-Left Evangelism - A proven track record of mentoring developers and fostering a culture where security is a shared responsibility</li>
<li>Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CKS, OSCP.</li>
<li>Experience operating in regulated organizations with a 3LoD model.</li>
<li>Willingness to challenge existing processes respectfully.</li>
<li>Experience translating policy and regulatory requirements into control design for engineers and architects.</li>
<li>Proven ability to upskill and learn modern technologies.</li>
<li>Experience in financial services consumer businesses or Fintech organizations.</li>
</ul>#ICBCareers
ABOUT US
 
 
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. 
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. 
</div></div> 
 
ABOUT THE TEAM
 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Senior DevSecOps Architect

AI Security Institute

<div><h3 class="jobSectionHeader">Application Process &amp; Requirements:</h3>
Interview Process<ul><li>
Technical roles: Our technical roles' process includes submitting a CV and short written statement, 1-2 skills assessments such as technical interviews and take-home coding tests and 2-4 interviews, including a conversation with leadership. We tailor this process as needed for each role and candidate. If you're applying to our technical roles, this privacy policy applies.</li><li>
Non-technical roles: Our non-technical roles' process includes submitting a CV, 2-4 interviews including a conversation with leadership and sometimes presentation or take-home task assessments. While our interviews follow civil service requirements, we do not require answering in STAR or other rigid formats. We recommend preparing to speak about your past career experience and how you would approach problems you would face in your AISI role.</li></ul>
Nationality Requirements &amp; Visas<ul><li>
Technical roles: we can hire almost all nationalities and sponsor visas.
</li><li>Non-technical roles: you must meet civil service nationality requirements (by having Commonwealth citizenship, indefinite leave to remain, EU settled status, or meeting some other criteria).</li></ul>
National Security Vetting 
 
<ul><li>Requirements vary by role and not all roles require vetting; check each job ad.</li><li>
Counter Terrorism Check (CTC) and Security Clearance (SC) vettings usually require 2+ years of recent UK residency. Developed Vetting (DV) clearances usually require 10+ years.</li></ul>
Technical Salaries 
<ul><li>
On technical job ads, you'll see our total packages include a &quot;base salary&quot; and a &quot;technical talent allowance&quot;. This is civil service terminology. The technical talent allowance is part of your total salary and paychecks; there are no restrictions on how you spend it.</li></ul></div>
 <div><div><h2 class="jobSectionHeader">About the AI Security Institute</h2>

The AI Security Institute is the world's largest and best-funded team dedicated to understanding advanced AI risks and translating that knowledge into action. We&rsquo;re in the heart of the UK government with direct lines to No. 10 (the Prime Minister's office), and we work with frontier developers and governments globally.

We&rsquo;re here because governments are critical for advanced AI going well, and UK AISI is uniquely positioned to mobilise them. With our resources, unique agility and international influence, this is the best place to shape both AI development and government action.</div><div><h2 class="jobSectionHeader">
The deadline for applying to this role is Sunday 19th July 2026, end of day, anywhere on Earth.</h2>
<h2 class="jobSectionHeader"> 
About the Team:</h2>

Security Engineering at the AI Security Institute (AISI) exists to help our researchers move fast, safely. We treat security as a measurable, researcher-centric product.

We build secure-by-design platforms, automated governance, and intelligence-led detection that protects our people, partners, models, and data. We work shoulder to shoulder with research units and core technology teams, and we optimise for enablement over gatekeeping, proportionate controls, low ego, and high ownership. 

<h2 class="jobSectionHeader">
What you might work on:</h2>
<ul><li>Help design and ship paved roads and secure defaults across our platform so researchers can build quickly and safely</li>
<li>Build tooling and reusable infrastructure-as-code modules that make the secure path the easy path</li>
<li>Build provenance and integrity into the software supply chain (signing, attestation, artefact verification, reproducibility)</li>
<li>Support strengthened identity, segmentation, secrets, and key management to create a defensible foundation for evaluations at scale</li>
<li>Develop automated, evidence-driven assurance mapped to relevant standards, reducing audit toil and improving signal</li>
<li>Create detections and response playbooks tailored to model evaluations and research workflows, and run exercises to validate them</li>
<li>Threat model new evaluation pipelines with research and core technology teams, fixing classes of issues at the platform layer</li>
<li>Assess third-party services and hardware/software supply chains, and introduce lightweight controls that raise the bar</li>
<li>Contribute to open standards and open source, and share lessons with the broader community where appropriate</li>
</ul>
If you want to build security that accelerates frontier-scale AI safety research, and see your work land in production quickly, this is a good place to do it.<h2 class="jobSectionHeader"> 
</h2>
<h2 class="jobSectionHeader">Role Summary:</h2>
<div>
We're looking for a strong software engineer who's drawn to security. Someone who would rather ship a paved road than write a policy, and who's excited by the prospect of building the security foundations for frontier-scale AI safety research. You don't need to be a career security specialist. You do need to be a genuinely good engineer who thinks adversarially, cares about getting the defaults right, and wants to go deep on security over the coming years.

Working as a hands-on engineer on AISI's Security Engineering team, building the secure-by-default patterns, reusable controls, and guardrails that the rest of the organisation builds on top of. You'll spend at least your first year focused on platform and product security, embedding safe practices across the development lifecycle, hardening our cloud and CI/CD foundations, and partnering with engineers to fix classes of issues rather than one-off bugs.

You'll build influence through enablement, not enforcement. Over time, you'll extend these patterns. We expect your security depth to grow on the job; we'll back that with mentorship, learning budget, and real ownership early. 

</div>
<h2 class="jobSectionHeader">Responsibilities:</h2>
<ul><li>Write production-quality code and reusable infrastructure-as-code (Terraform, CDK, etc.) that delivers secure-by-default modules, bootstrap templates, and reference architectures</li>
<li>Build tooling for identity, secrets, environment isolation, and pipeline hardening</li>
<li>Develop and help maintain a baseline cloud control set (e.g. SCPs, logging, tagging) and improve cloud posture with automated feedback loops</li>
<li>Provide consulting and coaching to platform and product teams to support secure delivery</li>
<li>Threat model new and existing systems with research and core technology teams, and fix issues at the platform layer</li>
<li>Build provenance and integrity into the software supply chain (signing, attestation, artefact verification)</li>
<li>Help create detections and response playbooks, support post-incident reviews, and design for resilience</li>
<li>Align technical controls with governance and shared responsibility boundaries</li></ul> 

<h2 class="jobSectionHeader">
Profile requirements:</h2>

You may be a good fit if you have some of the following skills, experience, and attitudes:
<ul>
<li>Writing production-quality code at a fast pace, and designing, shipping, and maintaining complex tech products</li>
<li>A genuine pull towards security, you think adversarially, enjoy understanding how systems break, and want to make the secure path the default path</li>
<li>Strong Python and/or another production language, including the good vs. bad ways of doing things and a feel for the wider ecosystem and tooling</li>
<li>Experience building and maintaining systems on AWS or other cloud providers using infrastructure-as-code (Terraform, CDK, etc.)</li>
<li>Solid understanding of CI/CD pipelines and the software development lifecycle</li>
<li>You take the trajectory of frontier AI seriously, and you're motivated by the mission of making it safe</li>
<li>Strong written and verbal communication, and the ability to build influence in cross-functional environments</li>
<li>Improving technical standards across a team through mentoring and feedback</li>
</ul>
Motivated candidates are encouraged to apply even if you don't meet all the above criteria. We care more about engineering ability, security instinct, and trajectory than a long security CV.
<h2 class="jobSectionHeader">
Desired experience:</h2>

We additionally may factor in experience with areas like:
<ul>
<li>Cloud security, identity, networking, and org-level services</li>
<li>Cybersecurity expertise (threat modelling, detection and response, supply-chain security, secrets management)</li>
<li>Software supply-chain security and provenance</li>
<li>ML Ops and AI/ML platform surfaces</li>
<li>Practical understanding of AI/ML risks</li>
</ul><h2 class="jobSectionHeader">Key Competencies:</h2>
<ul><li>Strong software engineering and the ability to design reusable IaC components</li>
<li>Security instinct: threat modelling, secure defaults, and paved paths</li>
<li>Collaboration across platform and research teams</li>
<li>Cloud fundamentals (AWS), with appetite to go deep on cloud security</li>
<li>Growing capability in securing AI/ML workloads and artefacts</li>
<li>Clear communication and influence without authority</li></ul> 

<h2 class="jobSectionHeader">
Security Clearance:</h2>

Appointment is conditional on successfully completing UK Government SC clearance. Prior clearance is not required&mdash;we will sponsor and support you. You should normally have been resident in the UK for the past 5 years. More detail on clearance eligibility can be found on the UK Government website: National security vetting: clearance levels - GOV.UK.</div><div><h2 class="jobSectionHeader"> 
What We Offer</h2>

Impact you couldn't have anywhere else
<ul>
<li>Incredibly talented, mission-driven and supportive colleagues.</li>
</ul><ul><li>Direct influence on how frontier AI is governed and deployed globally.</li>
</ul><ul><li>Work with the Prime Minister&rsquo;s AI Advisor and leading AI companies.</li>
</ul><ul><li>Opportunity to shape the first &amp; best-resourced public-interest research team focused on AI security.</li>
</ul>
Resources &amp; access
<ul>
<li>Pre-release access to multiple frontier models and ample compute.</li>
</ul><ul><li>Extensive operational support so you can focus on research and ship quickly.</li>
</ul><ul><li>Work with experts across national security, policy, AI research and adjacent sciences.</li>
</ul>
Growth &amp; autonomy
<ul>
<li>If you&rsquo;re talented and driven, you&rsquo;ll own important problems early.</li>
</ul><ul><li>5 days off and annual stipends for learning and development, and funding for conferences and external collaborations.</li>
</ul><ul><li>Freedom to pursue research bets without product pressure.</li>
</ul><ul><li>Opportunities to publish and collaborate externally.</li>
</ul>
Life &amp; family*
<ul>
<li>Modern central London office (cafes, food court, gym), or where applicable, option to work in similar government offices in Birmingham, Cardiff, Darlington, Edinburgh, Salford or Bristol.</li>
</ul><ul><li>Hybrid working, flexibility for occasional remote work abroad and stipends for work-from-home equipment.</li>
</ul><ul><li>At least 25 days&rsquo; annual leave, 8 public holidays, extra team-wide breaks and 3 days off for volunteering.</li>
</ul><ul><li>Generous paid parental leave (36 weeks of UK statutory leave shared between parents + 3 extra paid weeks + option for additional unpaid time).</li>
</ul><ul><li>On top of your salary, we contribute 28.97% of your base salary to your pension.</li>
</ul><ul><li>Discounts and benefits for cycling to work, donations and retail/gyms.</li> 
</ul>
<ul><li>These benefits apply to direct employees. Benefits may differ for individuals joining through other employment arrangements such as secondments.</li></ul>
<h2 class="jobSectionHeader">
Salary</h2>

Annual salary is benchmarked to role scope and relevant experience. Most offers land between &pound;65,000 and &pound;145,000 made up of a base salary plus a technical allowance (take-home salary = base + technical allowance). An additional 28.97% employer pension contribution is paid on the base salary.

This role sits outside of the DDaT pay framework given the scope of this role requires in depth technical expertise in frontier AI safety, robustness and advanced AI architectures.

The full range of salaries are available below:
<ul>
<li>Level 3: &pound;65,000&ndash;&pound;75,000 (Base &pound;39,850 + Technical Allowance &pound;25,150&ndash;&pound;35,150)</li>
<li>Level 4: &pound;85,000&ndash;&pound;95,000 (Base &pound;47,355 + Technical Allowance &pound;37,645&ndash;&pound;47,645)</li>
<li>Level 5: &pound;105,000&ndash;&pound;115,000 (Base &pound;61,620 + Technical Allowance &pound;43,380&ndash;&pound;53,380)</li>
<li>Level 6: &pound;125,000&ndash;&pound;135,000 (Base &pound;74,605 + Technical Allowance &pound;50,395&ndash;&pound;60,395)</li>
<li>Level 7: &pound;145,000 (Base &pound;74,605 + Technical Allowance &pound;70,395)</li></ul> 


<h4 class="jobSectionHeader">Additional Information</h4>
<div><div><h3 class="jobSectionHeader">Use of AI in Applications</h3>

Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.
<h3 class="jobSectionHeader">
Internal Fraud Database</h3>

The Internal Fraud function of the Fraud, Error, Debt and Grants Function at the Cabinet Office processes details of civil servants who have been dismissed for committing internal fraud, or who would have been dismissed had they not resigned. The Cabinet Office receives the details from participating government organisations of civil servants who have been dismissed, or who would have been dismissed had they not resigned, for internal fraud. In instances such as this, civil servants are then banned for 5 years from further employment in the civil service. The Cabinet Office then processes this data and discloses a limited dataset back to DLUHC as a participating government organisations. DLUHC then carry out the pre employment checks so as to detect instances where known fraudsters are attempting to reapply for roles in the civil service. In this way, the policy is ensured and the repetition of internal fraud is prevented. For more information please see - Internal Fraud Register.
<h3 class="jobSectionHeader">
Security</h3>
Successful candidates must undergo a criminal record check and get baseline personnel security standard (BPSS) clearance before they can be appointed. Additionally, there is a strong preference for eligibility for counter-terrorist check (CTC) clearance. Some roles may require higher levels of clearance, and we will state this by exception in the job advertisement. See our vetting charter here.</div>
</div><div><h3 class="jobSectionHeader">Nationality requirements</h3>

We may be able to offer roles to applicant from any nationality or background. As such we encourage you to apply even if you do not meet the standard nationality requirements (opens in a new window).
</div>
<div><h3 class="jobSectionHeader">Working for the Civil Service</h3>
<div><div>The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants. The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.</div>
</div></div><div><h3 class="jobSectionHeader">Diversity and Inclusion</h3>
<div>The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window). As part of the application process, we monitor statistics on D&amp;I. You can see how we process this data here: Recruitment privacy notice - GOV.UK.</div></div></div></div>

Frontier Research Engineer, Security

NTT DATA

<div>At NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co-innovate solutions with clients and partners globally for business and societal impact. Serving 75% of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&amp;D. Make this the place where you belong, learn, and build your network. Make this the place where you grow. 
1. AI Security Strategy &amp; Architecture
<ul><li>Define and lead the AI security architecture roadmap aligned to enterprise security strategy.</li>
<li>Develop secure-by-design frameworks for AI/ML pipelines, including data ingestion, training, inference, and deployment.</li>
<li>Establish AI trust, risk, and compliance controls (e.g., explainability, fairness, robustness).</li>
</ul>
2. Threat Modelling &amp; Risk Management
<ul><li>Conduct threat modelling for AI systems, identifying vulnerabilities such as:
<ul><li>Adversarial attacks (evasion, poisoning)</li>
<li>Model inversion and extraction</li>
<li>Data leakage and privacy risks</li>
</ul></li><li>Define and implement risk mitigation strategies and controls.</li>
<li>Perform AI security risk assessments and integrate findings into governance processes.</li>
</ul>
3. Secure AI/ML Lifecycle
<ul><li>Integrate security into ML pipelines (MLSecOps) including CI/CD and MLOps frameworks.</li>
<li>Define controls for:
<ul><li>Secure dataset handling and lineage</li>
<li>Model versioning and integrity validation</li>
<li>Access control and secrets management</li>
</ul></li><li>Embed automated security testing into model development pipelines.</li>
</ul>
4. Data Protection &amp; Privacy
<ul><li>Ensure compliance with data protection regulations (e.g., GDPR, HIPAA where applicable).</li>
<li>Implement privacy-preserving techniques such as:
<ul><li>Differential privacy</li>
<li>Federated learning</li>
<li>Data anonymization and synthetic data</li>
</ul></li><li>Define policies for sensitive data usage in AI models.</li>
</ul>
5. Security Controls for Emerging AI Risks
<ul><li>Design safeguards for:
<ul><li>Large Language Models (LLMs) and generative AI (prompt injection, hallucinations, data exfiltration)</li>
<li>API and model endpoint security</li>
</ul></li><li>Implement guardrails and monitoring solutions for generative AI usage.</li>
</ul>
6. Governance, Compliance &amp; Standards
<ul><li>Establish AI security standards, policies, and guidelines aligned to frameworks such as:
<ul><li>NIST AI Risk Management Framework</li>
<li>ISO/IEC 27001, 23894</li>
</ul></li><li>Support regulatory compliance and audits related to AI security.</li>
</ul>
7. Collaboration &amp; Advisory
<ul><li>Partner with data scientists, ML engineers, DevOps, and security teams to embed security practices.</li>
<li>Act as a trusted advisor to business and technology stakeholders on AI-related risks.</li>
<li>Provide security design reviews for AI initiatives.</li>
</ul>
8. Monitoring &amp; Incident Response
<ul><li>Define monitoring for model drift, anomalies, and misuse detection.</li>
<li>Develop playbooks for AI-related security incidents, including model compromise or data breaches.</li>
<li>Lead investigations involving AI system risks.</li></ul> 

<ul><li>20+ years of experience in cybersecurity, with at least 3+ years in AI/ML security or data security.</li>
<li>Proven experience designing secure architectures for AI/ML systems.</li>
<li>Strong knowledge of:
<ul><li>Machine learning frameworks (TensorFlow, PyTorch, etc.)</li>
<li>Cloud platforms (Azure, AWS, GCP) and AI services</li>
<li>Identity &amp; access management, encryption, and network security</li>
</ul></li><li>Experience in threat modeling and risk assessment methodologies.</li>
<li>Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Cybersecurity, AI/ML, or related field.</li></ul> 

Preferred Qualifications
<ul><li>Certifications such as:
<ul><li>CISSP, CISM, CCSP</li>
<li>Certified AI Security (e.g., CAISP or similar)</li>
</ul></li><li>Experience with:
<ul><li>MLOps platforms (e.g., MLflow, Kubeflow)</li>
<li>AI red teaming and adversarial testing</li>
</ul></li><li>Knowledge of secure coding and DevSecOps practices.</li>
<li>Familiarity with Responsible AI principles and ethical AI frameworks.</li></ul> 

Key Skills
<ul><li>AI/ML security and adversarial techniques</li>
<li>Cloud security architecture</li>
<li>Data privacy and protection</li>
<li>Threat modeling and risk analysis</li>
<li>DevSecOps / MLSecOps</li>
<li>API and application security</li>
<li>Governance, risk, and compliance (GRC)</li>
<li>Strong communication and stakeholder management</li></ul> 

We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.
You can find more information about NTT DATA UK &amp; Ireland here: https://uk.nttdata.com/
We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.
Role &ndash; AI SECURITY ARCHITECT
Hybrid Variable - London or Birmingham
Overview
We are seeking an experienced AI Security Architect to design, implement, and govern secure AI/ML systems across the enterprise. This role is responsible for embedding security, privacy, and trust into AI solutions&mdash;from model development and deployment to monitoring and lifecycle management. The ideal candidate will combine deep cybersecurity expertise with hands-on knowledge of AI/ML technologies, ensuring that AI systems are resilient against adversarial threats, data leakage, and misuse.</div>

AI Security Architect

Explore 223+ Devsecops engineer in London this July. Find roles across top companies and apply now to boost your career.