Capgemini

Requirements

• Collaborate with AI/ML engineering, data engineering, platform, and application teams to gather and analyze AI security requirements
• Define and document secure reference architectures for AI/ML and GenAI workloads across cloud and enterprise environments
• Perform threat modeling for AI systems (training and inference) including risks such as prompt injection, data leakage, model inversion/extraction, insecure plugins/tools, and supply chain risks
• Establish security controls for data protection across the AI lifecycle: dataset governance, data minimization, labeling/classification alignment, encryption, key management, secrets handling, and secure data access patterns
• Define requirements and guardrails for GenAI safety and misuse prevention, including content filtering, prompt/response logging strategy, abuse detection, and safe tool execution
• Partner with IAM teams to implement least-privilege access for AI platforms, model endpoints, feature stores/vector databases, and supporting pipelines (service-to-service auth, token handling, RBAC/ABAC)
• Review and approve AI solution designs, ensuring alignment with security policies, regulatory expectations, and enterprise standards (secure SDLC/DevSecOps)
• Define requirements for model governance and assurance (model provenance, versioning, artifact integrity, evaluation/validation controls, documentation, and auditability)

Benefits

• 401k Matching
• Certification Support
• Flexible Hours
• Health Insurance
• Home Office Budget
• Learning Budget
• Paid Time Off
• Remote Work

Skills

Requirements

• 4–7 years of experience in Cybersecurity, Application Security, Cloud Security, or SOC/IR, with exposure to AI/ML workloads.
• Strong understanding of LLMs, prompt engineering basics, GenAI risks, and threat vectors.
• Experience with at least one cloud platform (AWS preferred) in a security capacity.
• Familiarity with AI-related risks such as prompt injection, data exfiltration, model manipulation, hallucinations, and access misuse.
• Hands-on exposure to security monitoring tools, API security, logging, and cloud-native detection.

Benefits

• Employee Discounts
• Professional Development
• Remote Work
• Wellness Programs

Skills