Overview

Por favor, lea detenidamente la siguiente descripción del puesto para asegurarse de que encaja con el perfil antes de enviar su solicitud.

As the senior technical owner, you will lead the AI security runtime control plane and enforcement fabric across a multi-cloud estate. You’ll implement inline AI traffic enforcement, tune policies for fast, low-friction security, and act as the escalation point for complex AI security incidents. You’ll drive a closed-loop defensive system that learns from red-team findings to evolve runtime policies and SOC threat models. You will collaborate with cross-functional teams to secure AI and cloud environments, applications, and infrastructure, shaping resilient security at scale.

Compensaciones / Ventajas

- elective benefits tailored to country
- career growth and professional development programs
- well-being programs and Life Empowerment Assistance
- diversity, equity & inclusion initiatives
- onboarding program to connect with colleagues
- participation in inclusive communities and volunteering initiatives

Responsabilidades

- Build and own the AI runtime control plane and inline enforcement pipeline for AI traffic across Azure, AWS, GCP, Copilot Studio, and self-hosted environments
- Harden gateway layers with buffering, overload management, rate limiting, and prompt-truncation to defend against token-exhaustion and denial-of-service attacks
- Integrate AI asset context, telemetry, and continuous red-team signals into SIEM/SOC workflows for forensics and audit
- Author and calibrate runtime policies (prompt-injection/jailbreak defense, PII redaction, data masking, tool-call validation, MCP access control)




- Balance detection and hard-block modes per AI archetype to minimize false positives
- Translate red-team findings into policy updates and new detections; validate with re-testing
- Lead L3 escalation for AI security toolset, investigate AI-specific attacks, and drive automated containment
- Evaluate and pilot AI security vendors and proofs-of-concept for runtime defense and model-security platforms
- Design and maintain secure multi-cloud patterns and least-privilege access across humans, service principals, and agents
- Embed security into DevSecOps with IaC scanning (Terraform), container/Kubernetes security, secrets management, and pre-deployment gates
- Support cloud workload vulnerability management and act as escalation for investigations across cloud, identity, endpoint, and AI telemetry

Requisitos principales

- Proven hands-on experience securing or operating AI/ML/LLM-based systems
- Experience deploying, integrating, and tuning security platforms xkdbapo in complex enterprise environments
- Security tooling experience in Kubernetes (AKS/EKS) and integrating open-source components
- Proficiency in KQL, PowerShell, Python, Terraform; CI/CD and IaC security
- Strong understanding of CSPM/CWPP/CNAPP operations and cloud identity/entitlements
- Excellent English communication and ability to document runbooks and integration guides
- Bachelor in Computer Science or related field (equivalently demonstrated practical experience)

- Strong written and verbal communication
- Cross-functional collaboration
- Analytical and problem-solving mindset
- AI/GenAI security depth including prompt-injection/jailbreak defense and RAG security
- LLM and agentic-AI threat modeling (OWASP LLM Top 10 2025, MITRE ATLAS)
- AI gateway and runtime enforcement technologies

📌 AI and Cloud Security Engineer - barcelona
🏢 Jobrapido
📍 Barcelona