Senior Cyber Security Engineer

Role Overview

We are looking for an experienced Senior Cyber Security Engineer to lead a vital cybersecurity program focusing on continuous security validation, AI security testing, threat emulation, and security assurance in a prominent banking environment. This position entails implementing ongoing validation measures across cloud infrastructures, applications, AI-based platforms, and model supply chains, ensuring security controls are robust against new cyber threats.

Key Responsibilities

• Design, develop, and manage continuous security validation initiatives spanning cloud environments, IT infrastructure, applications, and AI systems.
• Perform automated security validation exercises based on authorized threat scenarios and attack simulations.
• Create and update cybersecurity test suites aligned with threat intelligence and the latest attack methodologies.
• Conduct security assessments specifically for AI technologies, including adversarial testing on AI platforms and Generative AI.
• Validate security across cloud infrastructure, applications, APIs, AI models, and the model supply chains.
• Integrate threat intelligence feeds to transform emerging attack methods into actionable security validation scenarios.
• Oversee vulnerability identification and remediation workflows in collaboration with engineering teams.
• Support organizational governance through evidence collection, detailed reporting, and attestation processes.
• Work collaboratively with teams focused on security architecture, cloud platforms, and engineering to enhance cyber resilience.
• Develop metrics and dashboard reports that monitor security posture and program outcomes.
• Assist in deployment approvals by conducting risk-based remediation evaluations.
• Contribute to refining security testing methodologies according to industry best practices.
• Mentor junior engineers and foster heightened security awareness within engineering teams.

Required Skills & Qualifications

• Possess 8 to 10 years of experience in cyber security engineering, penetration testing, security validation, or red team roles.
• Expertise in offensive security, adversarial testing, application security, AI security, security validation, and threat emulation.
• Proven track record implementing automated continuous security validation processes.
• Hands-on experience with cloud security testing, especially within AWS and hybrid architectures.
• Strong familiarity with security frameworks and standards including OWASP Top 10, OWASP LLM Top 10, MITRE ATT&CK, and MITRE ATLAS.
• Practical experience performing AI red teaming and assessments focused on generative AI security.
• Acquainted with modern security validation platforms and attack simulation tools.
• Skilled in handling vulnerability management and lifecycle of security findings.
• Good understanding of secure software development and incorporating DevSecOps best practices.
• Excellent analytical capabilities, problem-solving skills, and effective communication.
• Knowledgeable of banking-specific security controls and regulations.

Certifications

• Mandatory: OSCP or OSCE certifications.
• Preferred: GIAC GPEN, GIAC GXPN, GIAC GMLE (or equivalent AI security certification).
• Desirable: Participation in Anthropic Cyber Verification Program, CREST Certified Tester (CCT).

Additional Preferred Experience

• Background in banking, financial services, or other regulated industries.
• Experience in AI model security testing and validating model supply chains.
• Familiarity with autonomous penetration testing tools and continuous validation platforms.
• Support experience with DevSecOps practices and secure CI/CD pipeline environments.
• Understanding of governance frameworks and assurance reporting processes.
• Experience operating within the Three Lines of Defense security model.

About the Employer

With more than 28 years of expertise, our organization understands that innovation drives agile and practical solutions that transform enterprises and careers. We provide resource management and intelligent services designed to help unlock future potential. We champion diversity, equity, and inclusion as foundations for high-performance teams, encouraging applications from qualified individuals of all backgrounds.