Job Title – AI Security Engineer

Location: Kharadi, Pune, India.

Life Unlimited. At Smith+Nephew, we design and manufacture technology that takes the limits off living.

The AI Security Engineer is a hands-on individual contributor reporting to the AI Security Manager. The role is directly assigned to enterprise AI projects, embedding security into the design, build, and deployment of web applications, AI agents, and their integrations with enterprise data and systems. Working closely with development and platform teams, the AI Security Engineer applies Microsoft security capabilities and AI security best practice to identify risks, define practical security requirements, and confirm the right controls are in place before and after release.

What will you be doing?

• Serve as the dedicated security engineer on assigned enterprise AI projects, supporting delivery teams from design through deployment and ongoing operation.

• Perform threat modelling and security design reviews for web applications, AI agents, copilots, and their integrations with enterprise data and systems.

• Define and validate security requirements for AI solutions built on Microsoft platforms, including Azure, Microsoft Foundry, Copilot Studio, Microsoft 365 Copilot, and Power Platform.

• Review proposed AI tools and solution architectures against the approved tool list and the enterprise architecture capability map, and advise on approval status.

• Identify and help mitigate AI-specific and agentic AI risks such as prompt injection, data leakage, insecure tool and plugin use, MCP and tool integration risks, and excessive agent permissions, aligned with frameworks such as OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and NIST AI RMF.

• Guide implementation of identity, access, and data protection controls, including Microsoft Entra ID, managed identities, Azure Key Vault, Microsoft Purview, and network isolation.

• Define and validate agent identity and permission models, ensuring each AI agent uses least-privilege access to tools and data.

• Guide implementation of AI runtime protections such as an AI gateway or Azure API Management, Prompt Shields, and Azure AI Content Safety.

• Support secure development practices through code and configuration reviews, security testing, and tracking remediation of findings with development teams.

• Coordinate penetration testing for AI applications, including scoping, managing external testers, and tracking findings to closure.

• Use Microsoft security tooling such as Microsoft Defender for Cloud and Microsoft Sentinel to help monitor AI workloads and support investigation of AI-related security issues.

• Own and maintain AI incident response runbooks, and support incident handling for AI-related security events.

• Document security assessments, risks, and residual risk decisions, and escalate significant issues to the AI Security Manager.

• Contribute to AI security standards, reusable secure design patterns, and guidance, and share best practice with project teams.

What will you need to be successful?

• Education: Bachelor’s degree in computer science, Engineering, Information Systems or equivalent experience.

• Licenses / Certifications: Microsoft security or AI certifications preferred. CISSP, CISM, or equivalent preferred.
• Experience: 4 to 7 years in application security, cloud security, or security engineering, including hands-on work securing cloud or AI-enabled applications.
• Domain Expertise:
• Cybersecurity, application security, and cloud security engineering, with working knowledge of risk management and compliance.
• Understanding of AI, Machine Learning, Generative AI, AI agents, and associated security risks.
• Hands-on experience with Microsoft Azure and Microsoft 365 security controls, including Microsoft Entra ID, Defender, Purview, and Sentinel.
• Familiarity with Microsoft AI platforms such as Microsoft Foundry, Azure OpenAI, Copilot Studio, and Power Platform, and their security configuration requirements.
• Understanding of agentic AI security, including agent identities and permissions, MCP and tool security, AI gateways, and Prompt Shields / Azure AI Content Safety.
• Experience securing web applications and APIs, including threat modelling, secure code review, and security testing.
• Ability to translate security requirements into practical guidance for development, platform, data, privacy, and compliance teams.
• Agile / Digital Experience:
• Experience working within Agile delivery environments and product-centric organisations.
• Skilled at translating requirements into deliverable outcomes and prioritised roadmaps.
• Experience working with cross-functional teams to deliver technology and security initiatives.
• Individual Skills:
• Strong collaborator who takes ownership of assigned project outcomes.
• Excellent communication and influencing skills.
• Analytical problem solver with strong decision-making capability.
• Ability to balance innovation, risk management, and business priorities.
• Mindset & Behaviours:
• Exercises sound judgment and make clear, timely decisions in ambiguous or evolving situations.
• Applies critical thinking to interpret complex information, make sense of ambiguity, and guide clear action.
• Demonstrates ethical reasoning and accountability in decision-making and delivery.
• Brings creativity and strategic imagination to reframe problems, explore opportunities, and shape new solutions.
• Shows learning agility and adaptability in response to change, feedback, and new information.

You. Unlimited.

We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve.

Inclusion + Belonging - Committed to Welcoming, Celebrating and Thriving. Learn more about our Employee Inclusion Groups on our website https://www.smith-nephew.com/

Other reasons why you will love it here!

• Your Future: Major Medical coverage + Policy exclusions and insurance non-medical limit. Educational Assistance.
• Work/Life Balance: Flexible Personal/Vacation Time Off, Privilege Leave, Floater Leave.
• Your Wellbeing: Parents / Parents in Law’s Insurance, Employee Assistance Program, Parental Leave.
• Flexibility: Hybrid Work Model (For most professional roles)
• Training: Hands-On, Team-Customized, Mentorship
• Extra Perks: Free Cab Transport facility for all employees, One Time Meal provided to all employees as per shift. Night Shift Allowances.

#L1-YS1