Senior AI Security Engineer (m/f/d) – GenAI & AI Platform Security

Senior AI Security Engineer (m/f/d) – GenAI & AI Platform Security

In Germany- Berlin| Bonn | Frankfurt/Main | Hamburg | Cologne | Munich

Simon-Kucher is enabling its employees with generativeAI based solutions to improve productivity. To support this endeavor, a centralData & AI function is being established. As a Senior AI Security Engineer (m/f/d) – GenAI & AIPlatform Security you will play a key role in ensuring thatour AI ecosystem is secure by design. Working closely with our Data & AIteam, IT, engineering teams, and AI product owners, you will help establish thesecurity foundations, governance frameworks, and technical controls required tosafely scale AI-powered applications, AI agents, and GenAI solutions across thefirm.

What makes us special::

• Advance your career with exciting professional opportunities in our thriving company with a startup feel.
• Voice your unique ideas in a corporate culture defined by openness and integrity.
• Enjoy the opportunity to work from abroad (workation).
• Feel at home working with our helpful, enthusiastic colleagues who have great team spirit.
• Broaden your perspective with our extensive training curriculum and learning programs (e.g. LinkedIn Learning).
• Speak your mind in our holistic feedback and development processes (e.g. 360-degree feedback).
• Satisfy your need for adventure with our opportunities to live and work abroad in one of our many international offices
• Enjoy our benefits, such as hybrid working, daycare allowance, corporate discounts, and wellbeing support (e.g. Headspace).
• Unwind in our break areas where you can help yourself to the healthy snacks and beverages provided.
• See another side of your coworkers at our frequent employee events and highly anticipated World Meeting and Holiday Party.

Howyou will create an impact:

• Drive the security-by-design approach for AI solutions across Simon-Kucher by defining and continuously evolving security standards, controls, and guardrails for AI agents, LLM-driven applications, and Generative AI solutions, aligned with industry best practices such as the OWASP Top 10 for LLM Applications.
• Partner closely with Data & AI, Engineering, and IT teams to ensure secure, scalable, and compliant development and deployment of AI-powered solutions.
• Support the design and development of AI agents using modern frameworks and tooling such as LangSmith and related orchestration, monitoring, and evaluation platforms.
• Assess AI solution architectures with a focus on identity and access management, data protection, model security, secure integrations, vector database security, and infrastructure hardening.
• Establish and operationalize DevSecOps practices across the Secure Software Development Lifecycle (SSDLC), integrating automated security controls and testing capabilities such as SAST, DAST, and Software Composition Analysis (SCA) into CI/CD pipelines and cloud-based AI environments.
• Conduct security reviews, threat modeling workshops, and risk assessments to identify and mitigate AI-specific risks, including prompt injection, data leakage, model misuse, overprivileged access, and third-party dependencies.
• Advise project teams on secure patterns for integrating enterprise data, APIs, Retrieval-Augmented Generation (RAG) architectures, vector databases, and external services into AI applications.
• Act as a trusted advisor to product owners, architects, developers, and business stakeholders on secure AI adoption, AI governance, and compliance requirements, translating internal policies and emerging regulations such as the EU AI Act into practical development standards.

Aboutyou:

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Systems, Data Science, or a related field.
• 7+ years of experience in cybersecurity, application security, cloud security, security engineering, or a comparable role.
• Strong understanding of Application Security, Secure Software Development Lifecycle (SSDLC), secure coding practices, and DevSecOps methodologies, including hands-on experience with security testing capabilities such as SAST, DAST, and Software Composition Analysis (SCA).
• Experience securing cloud-native environments and modern infrastructure, including CI/CD pipelines, containerized workloads, Identity & Access Management (IAM), secrets management, and runtime security controls.
• Experience building, reviewing, or securing LLM-driven applications, AI agents, and Generative AI solutions using frameworks such as LangSmith or similar ecosystems, combined with knowledge of AI Security, AI threat modeling, enterprise AI security controls, and industry standards such as the OWASP Top 10 for LLM Applications.
• Fluent English communication skills (C1+) with the ability to translate complex security requirements into pragmatic guidance for technical and non-technical stakeholders.

Have we sparked your interest? Simply click the 'Apply now' button tosubmit your application. Please note that, for data protection reasons, wecannot accept applications via email.
Would you like to learn more about us and our company culture? Click here to watch our recruitment video.

About Simon-Kucher
Simon-Kucher is a global consultancy with more than 2,200 employees in30+ countries. As a trusted commercial advisor focused on unlocking bettergrowth, we combine deep consulting expertise, growth specialization, andtechnology to scale lasting impact. We optimize every lever of commercialstrategy – product, pricing, innovation, marketing, and sales – based on whatcustomers want and value. With over 40 years of monetization experience, we arerecognized as the world’s leading commercial growth and pricing specialist simon-kucher.com

We believe in building a culture that embraces diversity, equity, andinclusion, creating an environment in which our people feel valued, are able tobe themselves and feel their contribution matters. If we get that right,remarkable things will happen; people will grow faster, innovate, feel valued,and create better outcomes for everyone – our people, our clients and, ofcourse, our business.


Yourpersonal contact:
Christina Jaup-Schwilk
recruitment.germany(at)simon-kucher.com

Please submit your application exclusively viathe “Apply now”-button!

Better growth starts here. With you.