Senior AI Security Expert

IN_Senior Associate_AI Security SME_Digital Integration_Advisory_Kolkata

Line of Service

Advisory

Industry/Sector

Not Applicable

Specialism

Microsoft

Management Level

Senior Associate

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us.

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Job Description

• We are looking for a Senior AI Security Subject Matter Expert (SME) to provide technical AI tooling reviews and hands-on engineering support for our AI security program. This is a role for a "builder-defender"—someone who can critically evaluate emerging AI technologies, architect secure integration patterns, and execute tactical security initiatives.

  The ideal candidate acts as a bridge between high-level security strategy and ground-level implementation, capable of performing deep-dive technical assessments one day and advising business stakeholders on safe AI adoption the next.

  In priority order, the SME will focus on three primary areas:

  1. Review security architecture and controls for AI tools on an ad hoc request basis from the business.

  2. Identify high-priority AI needs across our security domains and business to inform AI intake and adoption.

  3. Assist teams with building AI into their processes, consulting on options, architecture, and implementation where needed.

• Responsibilities

  · · Technical Leadership & Delivery: Drive the technical implementation of security controls, moving beyond theory to practical application. execute on configuration, integration, and tuning of security platforms.

  · · Security Architecture & Design: Review and design secure patterns for AI system integration, ensuring alignment with enterprise security standards. Provide expert guidance on "build vs. buy" decisions and secure deployment models.

  · · Technology Evaluation & PoC Execution: Conduct rigorous technical assessments of emerging security tools and AI platforms. Define test cases, execute hands-on validation, and provide data-driven recommendations.

  · · Threat Modeling & Risk Assessment: Perform threat modeling for AI use cases, identifying risks related to prompt injection, data leakage, and model manipulation (OWASP Top 10 for LLM).

  · · Advisory & Governance: Serve as the primary technical advisor for business units proposing new AI use cases. Triage requests to determine appropriate security pathways (e.g., enterprise platform vs. custom development).

  Qualifications

  Required Experience

  · · Security Engineering: 5+ years of experience in Application Security, Cloud Security (AWS/Azure/GCP), or DevSecOps.

  · · AI/ML Security: Practical experience with Generative AI architectures (LLMs, RAG) and associated security risks. Familiarity with AI safety frameworks (NIST AI RMF, OWASP LLM).

  · · Technical Assessment: Proven track record of evaluating third-party vendors and technologies against strict security requirements.

  Technical Skills

  · · Scripting & Automation: Proficiency in Python or similar languages to write scripts for API testing, automation, or light prototyping.

  · · Architecture: Strong understanding of API security, OAuth/OIDC, containerization (Docker/Kubernetes), and cloud-native services.

  · · Tooling: Experience with Security Posture Management (CSPM/ASPM) tools and vulnerability scanners.

  Core Competencies

  · · Analytical Thinking: Ability to dissect complex technical problems and identify subtle security flaws.

  · · Communication: Strong ability to explain complex AI security risks to non-technical stakeholders and business leaders.

  · · Stakeholder Management: Ability to build trust with engineering, product, data science, and governance partners; influence decisions without direct authority.

  · · Curiosity & Depth: Proactive learner who can quickly dive deep into new AI technologies, architectures, and failure modes.

  · · Adaptability: Comfort working in a rapidly evolving technology landscape with high ambiguity.

  Preferred (Bonus)

  · · Experience with specific AI security tooling and vendors

 

Mandatory skill sets:

AI Security

Preferred skill sets:

AI Security

Years of experience required:

2 - 5 Years

Education qualification:

B.E./B.Tech

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required: Bachelor of Technology, Bachelor of EngineeringDegrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Identity Management (IdM)

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture {+ 8 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Available for Work Visa Sponsorship?

Government Clearance Required?

Job Posting End Date

May 28, 2026

Experience Level

Senior Level