Senior AI Security Engineer (m/f/d) – GenAI & AI Platform Security

Senior AI Security Engineer (m/f/d) – GenAI & AI Platform Security

In Germany- Berlin | Bonn | Frankfurt/Main | Hamburg | Cologne | Munich

Simon-Kucher is enabling its employees with generative AI based solutions to improve productivity. To support this endeavor, a central Data & AI function is being established. As a Senior AI Security Engineer (m/f/d) – GenAI & AI Platform Security you will play a key role in ensuring that our AI ecosystem is secure by design. Working closely with our Data & AI team, IT, engineering teams, and AI product owners, you will help establish the security foundations, governance frameworks, and technical controls required to safely scale AI-powered applications, AI agents, and GenAI solutions across the firm.

What makes us special::

• Advance your career with exciting professional opportunities in our thriving company with a startup feel.
• Voice your unique ideas in a corporate culture defined by openness and integrity.
• Enjoy the opportunity to work from abroad (workation).
• Feel at home working with our helpful, enthusiastic colleagues who have great team spirit.
• Broaden your perspective with our extensive training curriculum and learning programs (e.g. LinkedIn Learning).
• Speak your mind in our holistic feedback and development processes (e.g. 360-degree feedback).
• Satisfy your need for adventure with our opportunities to live and work abroad in one of our many international offices
• Enjoy our benefits, such as hybrid working, daycare allowance, corporate discounts, and wellbeing support (e.g. Headspace).
• Unwind in our break areas where you can help yourself to the healthy snacks and beverages provided.
• See another side of your coworkers at our frequent employee events and highly anticipated World Meeting and Holiday Party.

How you will create an impact:

• Drive the security-by-design approach for AI solutions across Simon-Kucher by defining and continuously evolving security standards, controls, and guardrails for AI agents, LLM-driven applications, and Generative AI solutions, aligned with industry best practices such as the OWASP Top 10 for LLM Applications.
• Partner closely with Data & AI, Engineering, and IT teams to ensure secure, scalable, and compliant development and deployment of AI-powered solutions.
• Support the design and development of AI agents using modern frameworks and tooling such as LangSmith and related orchestration, monitoring, and evaluation platforms.
• Assess AI solution architectures with a focus on identity and access management, data protection, model security, secure integrations, vector database security, and infrastructure hardening.
• Establish and operationalize DevSecOps practices across the Secure Software Development Lifecycle (SSDLC), integrating automated security controls and testing capabilities such as SAST, DAST, and Software Composition Analysis (SCA) into CI/CD pipelines and cloud-based AI environments.
• Conduct security reviews, threat modeling workshops, and risk assessments to identify and mitigate AI-specific risks, including prompt injection, data leakage, model misuse, overprivileged access, and third-party dependencies.
• Advise project teams on secure patterns for integrating enterprise data, APIs, Retrieval-Augmented Generation (RAG) architectures, vector databases, and external services into AI applications.
• Act as a trusted advisor to product owners, architects, developers, and business stakeholders on secure AI adoption, AI governance, and compliance requirements, translating internal policies and emerging regulations such as the EU AI Act into practical development standards.

About you:

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Systems, Data Science, or a related field.
• 7+ years of experience in cybersecurity, application security, cloud security, security engineering, or a comparable role.
• Strong understanding of Application Security, Secure Software Development Lifecycle (SSDLC), secure coding practices, and DevSecOps methodologies, including hands-on experience with security testing capabilities such as SAST, DAST, and Software Composition Analysis (SCA).
• Experience securing cloud-native environments and modern infrastructure, including CI/CD pipelines, containerized workloads, Identity & Access Management (IAM), secrets management, and runtime security controls.
• Experience building, reviewing, or securing LLM-driven applications, AI agents, and Generative AI solutions using frameworks such as LangSmith or similar ecosystems, combined with knowledge of AI Security, AI threat modeling, enterprise AI security controls, and industry standards such as the OWASP Top 10 for LLM Applications.
• Fluent English communication skills (C1+) with the ability to translate complex security requirements into pragmatic guidance for technical and non-technical stakeholders.