AI Security Consultant
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.
Responsibilities:
- Conduct cyber security assessments across technology estates, cloud environments, applications, networks, identity platforms and operational processes
- Review security architectures and provide pragmatic recommendations aligned to business risk
- Support design and implementation of controls for access management, data protection, logging and monitoring, vulnerability management, incident response and third-party risk
- Help clients interpret security requirements, assess control maturity and develop improvement roadmaps
- Translate technical findings into business-relevant advice for senior stakeholders
- Assess risks in AI-enabled applications, LLM integrations, AI agents, autonomous workflows and model-connected business processes
- Review AI designs for prompt injection, excessive agency, data leakage, insecure tool use, unsafe outputs, model supply chain exposure and weak human oversight
- Threat model agentic systems and their tool, API, data, decision and action flows
- Advise on secure AI application patterns, permission boundaries, identity controls, sandboxing, auditability, validation and human-in-the-loop controls
- Help establish AI governance and assurance across the lifecycle
- Identify safe uses of AI in alert triage, threat intelligence, incident summarisation, detection engineering, reporting, vulnerability prioritisation and control testing
- Evaluate AI-enabled security tools and design responsible AI-augmented security workflows
- Develop playbooks, guardrails and operating models for AI in SOC, GRC, vulnerability management and incident response
- Measure the effectiveness, limitations and risks of AI-assisted security processes
Requirements:
- Strong background in cyber security consulting, security architecture, risk management or security operations
- Good understanding of identity and access management, cloud security, application security, data protection, vulnerability management, incident response and security monitoring
- Ability to assess technical environments and produce clear, prioritised recommendations
- Experience engaging with technical teams and senior business stakeholders
- Understanding of AI, generative AI or LLM-enabled systems and their interaction with data, prompts, APIs, tools and users
- Awareness of AI security risks including prompt injection, sensitive information disclosure, excessive agency, insecure output handling, model/data poisoning, vector or embedding weaknesses and AI supply chain risk
- Ability to perform threat modelling for complex, AI-assisted or agentic workflows
- Strong written and verbal communication skills
- Experience with AI governance, responsible AI, model risk management or AI assurance
- Familiarity with NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls or cloud security frameworks
- Experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence or incident response
- Knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases or automation/orchestration tools
- Experience designing guardrails for autonomous systems
- Relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer/Auditor, cloud security certifications or AI/security-focused training
- Must undergo background checks and achieve the Baseline Personnel Security Standard
- Some UK roles require UK security clearance and at least 5 years of continuous UK residency; applicants should be British citizens or have been resident in the UK for the past 5 years
Benefits:
- Flexible and unique career within a trust-based, inclusive environment
- Technical career track progression
- Knowledge-sharing, coaching and mentoring
- Budget to take technical and non-technical courses
- Certifications
- Private healthcare for you and your family
- 25 days annual leave
- Bonus half day on Christmas Eve
- Opportunity to buy 5 additional days of leave
- Generous company pension scheme
- Community and charity-based initiatives
- Annual performance-based bonus
- PA share ownership
- Tax efficient benefits, including cycle to work and give as you earn
- Recruitment process adjustments or accommodations
Similar Jobs
Senior Director, Cybersecurity GRC
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.
Senior Information Security Engineer
Senior Information Security Engineer securing MoneyGram’s cross-border money transfer systems. Implementing detection, incident response, cloud security, vulnerability management, and automation controls.
IT Security Specialist – Identity & Access Management, Migration Consultant
IAM migration consultant leading enterprise authentication modernization from ForgeRock OpenAM to PingOne Advanced Identity Cloud and Microsoft Entra ID. Minimizing disruption through SSO implementation, testing, documentation, and post-migration support.
Residential Physical Security Specialist
Residential security specialist protecting Rocket Companies executives, private residences, and families. Coordinating executive protection assignments and mitigating physical security risks.
Security Engineer Consultant II
Security Engineer Consultant II designing and implementing cloud and application security solutions for Allstate’s insurance business. Supporting DevOps/SecOps, vulnerability management, and secure IaaS/PaaS/SaaS implementations.
Staff Security Engineer – Threat Detection
Staff Security Engineer building AI-powered threat detections and response workflows at Snowflake, a cloud data platform. Improving detection coverage, automation, and security analytics at global scale.
Security Director
Director of Security protecting Zcash wallets, protocols, and cryptographic infrastructure at ZODL. Leading incident response, audits, security policy, and proactive vulnerability mitigation across a distributed global team.
Senior Datadog Security – Observability Engineer
Senior Datadog engineer scaling detection engineering and security observability for Keeper Security’s cybersecurity platform. Building SIEM rules, telemetry pipelines, dashboards, and monitoring across AWS environments.
Engenheiro de Segurança do Trabalho
Engenheiro de Segurança do Trabalho remoto apoiando gestão de contingência e emergências na Petrobras. Elaborando planos, painéis Power BI, treinamentos, auditorias e análises de risco de processo.
Senior Agentic AI Specialist – Integrations, Security and Continuous Evolution
Especialista sênior evoluindo a plataforma AIDA de IA agêntica para integrações corporativas seguras. Implementando RAG, controles de segurança, validações e monitoramento contínuo dos agentes.
Senior Security Engineer
Senior Security Engineer developing and securing enterprise, cloud, and infrastructure cybersecurity solutions for European public-sector clients. Automating operations, hardening systems, and resolving security issues.
Senior Security Engineer, Data Loss Prevention
Senior Security Engineer protecting Fragomen’s immigration law firm data through enterprise DLP controls. Investigating exposure risks and integrating Microsoft 365, cloud, SaaS, endpoint, and SIEM security capabilities.
Security Systems Installation
Sr. Coordinator supporting Interface Systems’ managed business security installations. Troubleshooting Access Control, CCTV/VMS, alarms, and low-voltage systems for field technicians.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, network, and wireless systems. Interface Systems delivers managed security, network, UCaaS, and business intelligence solutions.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, access control, and network systems. Interface Systems delivers managed security, connectivity, and IT solutions to distributed enterprises.
Business Information Security Lead
Business Information Security Lead securing US Foods’ digital foodservice technology ecosystem. Managing cybersecurity risks, compliance, assessments, and remediation across DigiTech value streams.
Senior Security Engineer
Senior Security Engineer enhancing cybersecurity capabilities across multiple domains for EverCommerce. Collaborating with various teams to improve security posture in a growing environment.
Senior Consultant – Cloud Red Team, Blue Team
Sr. Consultant performing cloud-focused adversary emulation techniques. Collaborating with clients to validate security defenses and improve cloud security measures.
Senior Security Research Engineer
Joining Picus as a Senior Security Research Engineer, focusing on technical content in cybersecurity. Engage in deep research, shaping the market's understanding of exposure validation.
Principal Network Security Engineer
Principal Network Security Engineer leading design and architecture of Autodesk's global network security infrastructure. Collaborating with IT to enhance security posture across cloud and hybrid networks.