Senior Security Engineer

Senior Security Engineer – AI & Emerging Technologies Location: London (2-3 days in the office) Salary: £100,000 – £120,000 + annual discretionary bonus (Sponsorship not provided) About the Role Our client is looking for a Senior Security Engineer to play a significant role in securing the firm's adoption of AI and emerging technology. You'll work directly with the firm's in-house AI team, ICT, and business stakeholders. Your remit will cover the enterprise AI platforms used across the organisation, alongside internally developed AI-enabled applications, workflows, integrations and agent-based solutions. This is a senior individual-contributor role with genuine autonomy. Your judgement should come from understanding how a solution actually works, how data and permissions flow through it, where the security risks sit, and what practical controls are needed — not simply which framework it should be measured against. Key Responsibilities

• Independently lead technical security assessments of third-party AI tools and enterprise AI platforms, including technologies such as ChatGPT, Claude and Microsoft Copilot, going beyond vendor questionnaires to understand how identity, permissions, data flows and integrations behave in practice.
• Lead STRIDE-based or equivalent threat modelling for internally developed AI applications, automated workflows, integrations and agent-based use cases.
• Lead security architecture input for AI solutions, documenting security requirements, recommendations, design decisions and relevant trade-offs.
• Define and recommend security controls across identity and access, data protection, logging and monitoring, encryption and secure configuration, with particular depth across Microsoft 365, Entra ID and Azure.
• Establish secure patterns and practical guardrails that allow AI and technology teams to innovate without re-solving the same security challenges for every new use case.
• Assess AI-specific risks including prompt injection, excessive agency, data exposure, insecure integrations, inappropriate permissions, access to sensitive information and third-party AI risk.
• Credibly challenge technical designs with engineers, architects, vendors and senior stakeholders, and help drive agreed remediation with the relevant owning teams.
• Monitor emerging AI attack techniques and security risks and translate them into practical mitigations for the organisation. Skills & Experience
• Substantial hands-on experience in security engineering and/or security architecture, with clear examples of technical assessments, designs or recommendations you have personally led and the impact your work had.
• Proven experience of structured threat modelling on real systems or applications, ideally using STRIDE or an equivalent methodology.
• Strong technical capability across Microsoft 365, Entra ID and Azure, particularly around identity, permissions, data protection and SaaS integrations.
• A strong understanding of how modern applications and integrations work, including APIs, service identities, OAuth permissions, automation and access controls, and the ability to identify where a design could fail from a security perspective.
• A practical understanding of LLMs, generative AI and agentic AI, together with the security risks they introduce.
• The confidence to provide clear, independent technical recommendations and explain complex security risks to both technical and senior non-technical stakeholders. You do not need to have spent your entire career in AI security. Strong security engineering and architecture fundamentals are more important, alongside genuine curiosity about how AI is changing the threat landscape. Helpful, but not essential
• Hands-on experience securing LLM applications or AI agents, including areas such as tool and connector permissions, retrieval over enterprise data or Copilot data exposure.
• Experience working within an ISO 27001-aligned, regulated or security-conscious environment.
• Certifications such as CISSP, CCSP, SC-100 or AZ-500. Equivalent technical experience is equally valuable. Why it's worth a conversation You'll have significant technical influence at the point where an organisation's AI ambitions meet its security requirements. You'll work closely with an in-house AI team developing its own solutions, alongside enterprise platforms and emerging technologies, giving you exposure to some of the most interesting security challenges currently facing large organisations. The firm offers a collaborative, intellectually curious environment, a strong benefits package and discretionary bonus. If you are passionate about this opportunity and meet the qualifications and skills outlined, we encourage you to promptly submit your CV for consideration. Please note that the duties mentioned above are not exhaustive, and the role's responsibilities may evolve in response to changing circumstances and requirements. Sure Commercial Limited (trading as Sure Exec Search) is a proud Equal Opportunities employer and does not discriminate against any candidate on the grounds of age, disability, sex, gender identity, sexual orientation, pregnancy and maternity, race, religion or belief, marriage and civil partnerships, or other applicable legally protected characteristics. Our Diversity, Equity, and Inclusion Policy is available on request.