[What the role is]

[What you will be working on]

We are looking for an experienced AI Security Engineer to join our rail cybersecurity team. You will serve as an internal authority on AI security, providing expert guidance to project teams on how AI systems should be properly secured throughout the full development lifecycle. You will review AI security-related submissions and ensure that implementations align with international standards and industry best practices. This role is based within an Operational Technology (OT) rail environment, and the successful candidate is expected to bring an open mind and willingness to understand the unique characteristics and constraints of OT systems.

Key Responsibilities

• Serve as the internal subject matter expert and authority on AI security across railway domain

• Provide guidance to project and engineering teams on secure AI design, implementation, and deployment throughout the AI development lifecycle

• Review AI security-related submissions, documentation, and artefacts to ensure alignment with international standards and industry best practices (e.g. MITRE ATLAS, OWASP ML Security Top 10, IEC/ISO standards)

• Develop and maintain AI security standards, guidelines, and reference frameworks for use by project teams

• Advise on AI supply chain risks, including third-party models, frameworks, and datasets

• Support incident response activities related to AI system anomalies or security events, in an advisory capacity

• Stay current with emerging AI security threats, vulnerabilities, and evolving industry guidance

• Engage with OT teams to understand operational constraints and adapt AI security guidance accordingly

[What we are looking for]

• Knowledge in Computer Engineering, Electrical/Electronic Engineering, or a related field
• At least 3–5 years of relevant working experience in AI security, with demonstrable exposure to AI or machine learning systems
• Strong knowledge of machine learning concepts and associated security risks (e.g. model poisoning, adversarial attacks, data integrity, model inversion, inference attacks)
• Familiarity with the AI/ML development lifecycle and how security integrates at each stage
• Knowledge of AI security frameworks and standards (e.g. MITRE ATLAS, OWASP ML Security Top 10, NIST AI RMF)
• Ability to review technical submissions and provide clear, actionable security guidance
• Strong communication skills, with the ability to engage effectively with both technical and non-technical stakeholders
• Open-minded and willing to learn about Operational Technology (OT) environments, including their unique security constraints and operational requirements

Good to Have

• Knowledge of Large Language Model (LLM) security
• Familiarity with GenAI-specific security considerations
• Prior exposure to or experience in OT or industrial control system (ICS) environments
• Relevant certifications in AI/ML security