Skip to content
← Back to job listings

Corporate Security Engineer, AI

capital.com · Warsaw, Mazowieckie, Poland

CybersecuritySenior LevelQuick applyfull-time4 days ago

About The Role

Key Responsibilities

AI/ML Security — Integrations & Environment

  • -
  • Review and assess the security of AI system integrations across the corporate environment: LLM deployments, RAG pipelines, AI APIs, and AI-enabled automation tools
  • -
  • Evaluate configuration, access controls, and data flows of AI systems — the security of how AI is deployed and connected to corporate data and infrastructure
  • -
  • Conduct threat modelling for AI integrations and define secure deployment patterns for AI-powered tools
  • -
  • Support security reviews for new AI initiatives, tools, and vendor integrations before they reach production

AI Threat Detection & Mitigation

-

Identify and mitigate AI-specific threats: prompt injection & jailbreaks, model poisoning & data contamination, adversarial attacks, training-data leakage, insecure model serialisation, excessive permissions in AI agents

-

Develop guardrails, content filters, and output-validation mechanisms

-

Implement monitoring for anomalous AI behaviour across integrated systems

AI Data Egress & Data Protection

  • -
  • Own data protection controls in AI contexts: govern what data reaches LLM integrations, AI APIs, and AI-enabled tools
  • -
  • Design and maintain DLP policies specifically for AI channels — share links, API-connected AI tools, AI browser extensions, and automation agents
  • -
  • Ensure AI system compliance with GDPR , data-privacy regulations, and financial-industry data handling requirements
  • -
  • Perform AI-specific data risk assessments aligned with the internal risk methodology

AI Tool Risk & Shadow AI

  • -
  • Operate the controls that govern AI tool use across the organisation — detection policies, sanctioned-tool enforcement, share-link and egress controls
  • -
  • Lead third-party AI tool due diligence and ongoing assurance of AI vendor integrations
  • -
  • Monitor AI tool usage patterns and investigate anomalous behaviour
  • -
  • Contribute to AI security standards, internal policies, and the company's AI risk classification framework

Compliance & Governance

-

Own the AI security governance framework: policy authoring, risk classification, control design, and regulatory mapping

-

Maintain the AI risk register and report on AI-related risk posture to management

-

Map AI security controls against applicable regulatory frameworks: EU AI Act, NIST AI RMF , ISO/ IEC 42001, GDPR , and financial-sector requirements across FCA , CySEC , ASIC , SCB , and SCA jurisdictions

-

Participate in audit cycles; provide technical evidence and explain AI control design to auditors and regulators

Required Qualifications

  • -
  • 3–5+ years in cybersecurity with hands-on experience in AI/ML system security or a strong AI security focus;
  • -
  • Deep knowledge of AI-specific security risks and mitigations: prompt injection, model poisoning, data leakage, adversarial attacks, excessive permissions in AI agents;
  • -
  • Hands-on experience securing LLM integrations, RAG pipelines, and AI APIs — reviewing configurations, access controls, and data flows;
  • -
  • Experience authoring AI security policies, standards, and risk classification frameworks;
  • -
  • Familiarity with AI governance frameworks: EU AI Act, NIST AI RMF , ISO/ IEC 42001, and their application in a regulated financial services context;
  • -
  • Experience running AI risk assessments and maintaining an AI risk register;
  • -
  • Ability to manage third-party AI tool due diligence and control shadow AI across a distributed workforce;
  • -
  • Python proficiency for automation and scripting.

Preferred Qualifications

  • -
  • Recognised certifications: CISM , CISSP , or equivalent;
  • -
  • Experience in fintech or a regulated financial services environment;
  • -
  • Multi-jurisdiction compliance exposure ( FCA , CySEC , ASIC , SCB , or SCA );
  • -
  • Experience building AI-powered security automation — autonomous agents, LLM-driven triage, automated response workflows;
  • -
  • Experience presenting AI security risk posture to leadership or board-level audiences.

Soft Skills

  • -
  • Strong analytical and problem-solving skills;
  • -
  • Ability to translate technical AI risk into business and regulatory impact;
  • -
  • Able to explain AI security risks and mitigations to non-security teams;
  • -
  • Cross-functional collaboration with risk, compliance, product, and engineering teams;
  • -
  • Clear documentation and communication skills.

What you will get in return

  • Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated.
  • Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid
  • Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry.
  • Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team.
  • Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks!
  • Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits!
  • Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community.

This listing was posted by a verified recruiter at capital.com. Report this listing