Overview As the senior technical owner, you will lead the AI security runtime control plane and enforcement fabric across a multi-cloud estate. You’ll implement inline AI traffic enforcement, tune policies for fast, low-friction security, and act as the escalation point for complex AI security incidents. You’ll drive a closed-loop defensive system that learns from red-team findings to evolve runtime policies and SOC threat models. You will collaborate with cross-functional teams to secure AI and cloud environments, applications, and infrastructure, shaping resilient security at scale.

Compensaciones / Beneficioselective benefits tailored to countrycareer growth and professional development programswell-being programs and Life Empowerment Assistancediversity, equity & inclusion initiativesonboarding program to connect with colleaguesparticipation in inclusive communities and volunteering initiatives ResponsabilidadesBuild and own the AI runtime control plane and inline enforcement pipeline for AI traffic across Azure, AWS, GCP, Copilot Studio, and self-hosted environmentsHarden gateway layers with buffering, overload management, rate limiting, and prompt-truncation to defend against token-exhaustion and denial-of-service attacksIntegrate AI asset context, telemetry, and continuous red-team signals into SIEM/SOC workflows for forensics and auditAuthor and calibrate runtime policies (prompt-injection/jailbreak defense, PII redaction, data masking, tool-call validation,



MCP access control)Balance detection and hard-block modes per AI archetype to minimize false positivesTranslate red-team findings into policy updates and new detections; validate with re-testingLead L3 escalation for AI security toolset, investigate AI-specific attacks, and drive automated containmentEvaluate and pilot AI security vendors and proofs-of-concept for runtime defense and model-security platformsDesign and maintain secure multi-cloud patterns and least-privilege access across humans, service principals, and agentsEmbed security into DevSecOps with IaC scanning (Terraform), container/Kubernetes security, secrets management, and pre-deployment gatesSupport cloud workload vulnerability management and act as escalation for investigations across cloud, identity, endpoint, and AI telemetry Requisitos principalesProven hands-on experience securing or operating AI/ML/LLM-based systemsExperience deploying, integrating, and tuning security platforms in complex enterprise environmentsSecurity tooling experience in Kubernetes (AKS/EKS) and integrating open-source componentsProficiency in KQL, PowerShell, Python, Terraform; CI/CD and IaC securityStrong understanding of CSPM/CWPP/CNAPP operations and cloud identity/entitlementsExcellent English communication and ability to document runbooks and integration guidesBachelor in Computer Science or related field (equivalently demonstrated practical experience)Strong written and verbal communicationCross-functional collaborationAnalytical and problem-solving mindsetAI/GenAI security depth including prompt-injection/jailbreak defense and RAG securityLLM and agentic-AI threat modeling (OWASP LLM Top 10 2025, MITRE ATLAS)AI gateway and runtime enforcement technologies

📌 AI and Cloud Security Engineer - barcelona
🏢 Jobrapido
📍 Barcelona