AI Security & Automation Lead

You will own the firm's entire AI strategy in both directions: building the internal automation that makes our delivery team faster and better and building the client-facing AI security service lines (AI governance assessments and AI red-teaming) that don't exist in our portfolio today. You'll be the internal specialist whose full-time job is AI — not a mandate handed to already-stretched analysts.

KeyResponsibilities

• Internal tooling: Design and deploy AI-assisted workflows for reconnaissance, vulnerability prioritization, SOC alert triage/correlation, and draft report generation, with human validation built into every step.
• New service line — AI Governance & Risk Assessment: Build and deliver assessments against ISO/IEC 42001, the NIST AI Risk Management Framework, and EU AI Act risk-classification requirements for clients deploying AI systems.
• New service line — AI Red-Teaming: Design and run adversarial testing of client-deployed LLM systems and AI agents — prompt injection, data leakage, jailbreak resistance, and agentic-workflow abuse cases.
• Act as the internal champion and trainer for AI adoption across the delivery team — running hands-on enablement, not just issuing directives.
• Stay current on the fast-moving AI security threat and regulatory landscape and translate it into practical firm capability and client-facing offers.
• Partner with the Head of Security Operations & Delivery to ensure automation actually reduces delivery time and error rate, not just adds tooling overhead.

RequiredQualifications

• 3–6 years in cybersecurity (pentesting, security engineering, or SOC), with substantial hands-on experience applying AI/ML or LLM tooling to security workflows.
• Working understanding of at least one AI governance framework (ISO/IEC 42001, NIST AI RMF, or EU AI Act) — or demonstrated ability to get there fast.
• Practical experience with LLM application security concepts (prompt injection, jailbreaks, RAG/data-leakage risks, agent security).
• Comfortable building and shipping automation/scripts/tooling, not just using off-the-shelf products.
• Strong communicator — this role trains colleagues and pitches new services to clients.

Preferred

• Prior experience standing up a new service line or product inside a consulting/services business.
• A certification or credential relevant to AI governance (e.g., ISO 42001 Lead Implementer) or a track record of self-directed learning in the space.
• Familiarity with SOAR platforms or security automation frameworks.