Job description
ABOUT THE JOB
- Assess security risks across AI/ML ecosystems, including model pipelines, deployment platforms, inference services, RAG architectures, and LLM-based applications.
- Perform security testing on AI-enabled solutions to identify risks such as prompt injection, jailbreak attempts, data leakage, adversarial inputs, and insecure tool integrations.
- Conduct AI security reviews and red-team exercises, documenting findings with clear evidence and practical remediation recommendations.
- Review third-party AI models, datasets, model artifacts, and related components from a supply chain, integrity, and security perspective.
- Recommend and implement protection mechanisms such as input and output filtering, monitoring, logging, anomaly detection, and abuse prevention controls.
- Apply security engineering practices to AI infrastructure, including IAM, secrets management, API security, cloud security, container hardening, and network segmentation.
- Collaborate with technical teams to integrate secure-by-design principles into AI solutions, including prompt handling, tool permissions, output validation, and pre-launch design reviews.
- Support the analysis and remediation of AI-related security issues when required.
ABOUT YOU
- Bachelor’s degree in computer science, cybersecurity, or a related field, or equivalent practical experience.
- 2+ years of experience in cybersecurity, application security, penetration testing, or security engineering.
- Experience with AI security, LLM security, ML security testing, AI red-teaming, CTF, or bug bounty activities is a plus.
- Good understanding of AI/ML concepts and LLM application architecture, including APIs, vector databases, RAG, agents, and function calling patterns.
- Hands-on experience with Python for security tooling, testing, or automation.
- Solid knowledge of application security fundamentals, including authentication, authorization, secrets management, TLS, OWASP Top 10, and secure API design.
- Experience with at least one cloud platform such as AWS, Azure, or GCP, and familiarity with cloud security services.
- Familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF, EU AI Act requirements, or ISO/IEC 42001 is a plus.
- Good communication in English.
- Strong analytical mindset, clear written communication skills, autonomy, and ability to collaborate with distributed technical and security teams.
WHY AMARIS?
- Competitive salary and 13th-month salary
- 14+ annual leaves per year
- Premium healthcare insurance, starting from your probation period
- Project reviews and yearly performance appraisals
- Annual company trip
- Teambuilding activities: Team lunch/dinner, events, and celebrations, sports clubs (football, basketball, badminton, pickleball)
- International team with flexible working time
- Tailor-made career path
- Technical workshops and training courses
- Mobility: Opportunities to be on-site abroad in our offices in over 60+ countries
Equal Opportunity
Amaris Consulting is proud to be an equal opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.
#LI-PC1
Who are we?
Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1000 clients across the globe, we have been rolling out solutions in major projects for over a decade – this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We’re focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your steppingstone to cross rivers of change, meet challenges and achieve all your projects with success.At Amaris, we strive to provide our candidates with the best possible recruitment experience. We like to get to know our candidates, challenge them, and be able to give them proper feedback as quickly as possible. Here's what our recruitment process looks like:
Brief Call: Our process typically begins with a brief virtual/phone conversation to get to know you! The objective? Learn about you, understand your motivations, and make sure we have the right job for you!
Interviews (the average number of interviews is 3 - the number may vary depending on the level of seniority required for the position). During the interviews, you will meet people from our team: your line manager of course, but also other people related to your future role. We will talk in depth about you, your experience, and skills, but also about the position and what will be expected of you. Of course, you will also get to know Amaris: our culture, our roots, our teams, and your career opportunities!
Case study: Depending on the position, we may ask you to take a test. This could be a role play, a technical assessment, a problem-solving scenario, etc.
As you know, every person is different and so is every role in a company. That is why we have to adapt accordingly, and the process may differ slightly at times. However, please know that we always put ourselves in the candidate's shoes to ensure they have the best possible experience.
We look forward to meeting you!