Senior Security AI Engineer
Senior Security Engineer (AI)
About the client and the project
Regulatory compliance technology company providing an AI-powered platform to global enterprises. You will join a cybersecurity function supporting the organization's cloud and AI-driven platforms, working to secure AI/ML systems and pipelines against emerging threats. The role sits at the intersection of application security, cloud security, and AI risk management.
What you will do
- Define and govern security standards, policies, and frameworks for AI/ML adoption across the organization.
- Partner with platform, application engineering, and product teams to support secure development and deployment of AI-powered features.
- Coordinate with tech leads and engineering teams to promote a strong security culture and guide secure design patterns for AI workloads.
- Integrate security controls, automated testing, and vulnerability management into CI/CD and MLSecOps pipelines.
- Conduct security architecture reviews and threat modeling for LLMs and generative AI, addressing risks such as prompt injection, data poisoning, and model supply chain vulnerabilities (OWASP LLM Top 10).
- Lead investigation, mitigation, and recovery efforts for security incidents targeting AI infrastructure, inference endpoints, and managed cloud AI services.
- Monitor emerging cybersecurity trends and adversarial ML tactics to continuously evolve the organization's security posture.
Must-have skills
- Cybersecurity experience — 3+ years
- AI/ML security, LLM security, or security for AI-driven systems — 3+ years
- OpenAI
- CI/CD
- Application Security (AppSec) and Secure Software Development Lifecycle (SSDLC)
- OWASP Top 10 and OWASP LLM Top 10
- AI/ML security threat vectors (adversarial attacks, data poisoning, model inversion, inference endpoint security)
- Networking fundamentals (TCP/IP, LAN/WAN, OSI model)
- Security protocols (HTTPS, DNS, SMTP, FTP, SSH)
- Firewalls (IDS/IPS)
- English B2
Nice to have
- Docker
- Auth0 (IAM)
- Amazon Web Services (AWS)
- DevSecOps
- IAM concepts, encryption in transit/at rest, shared responsibility models
- Securing virtual machines and containerized environments
Location and work model
- Hybrid (2 days/week in the office, Lisboa)
Why KWAN
At KWAN, your career is bigger than one project. You join a real team, on a long-term project, at a company where technology is the business. And when you are ready for something new — a new stack, a new industry, a bigger role — we find that next step with you, without you having to start over somewhere else.
From day one you have a dedicated People Experience Partner: one person accountable for your growth, not your allocation. They know where you want to go, and they help you get there.
You keep learning as technology moves (AI included). Your impact is seen and recognised. Pay and expectations are talked about openly. And you work remote-first, with hubs in Lisbon and Porto for when you want people around.
Grow with clarity. Be treated with respect. Build things that matter.
Apply — if your profile is a match for this role, you will hear from our Talent team within 48 hours. If it is not the right match this time, we will reach out as soon as we find a role that fits you better.
What we offer:
- A project that matches your skills and ambitions, as well as your preferences for working policies and culture.
- A competitive salary with awesome benefits and opportunities to leverage your knowledge and network to earn additional income.
- An empowering and respectful work culture enriched with social and learning events.
- A People Experience Partner specially assigned to you - your go-to career guide, responsible for supporting your growth, facilitating training, and ensuring your work-life balance at KWAN.
What You Can Expect as a KWANer
Respect isn’t optional here
Dedicated People Experience Partner
Someone accountable for your growth, not your allocation.
Continuous learning, built in
Recognition that’s visible
A culture you can feel
Flexible spaces to work your way
Didn't find your mission yet?
Strong profiles don’t always match timing. That doesn’t mean there isn’t alignment.
We review every application. If there’s alignment, we won’t let it get lost in a database.