AI Security Specialist

Role Overview:

We are looking for an AI Security Engineer to join our Network & Infrastructure Security team . As Plata adopts AI across product features, developer workflows, and internal operations, this role exists to make that adoption safe by design. You will own the AI Security program at Plata, partnering with product, infrastructure, and ML teams. The role is hands-on (you will build, integrate, and operate controls) and advisory (you will shape policy and educate teams) in roughly equal measure. A strong DevSecOps foundation is required, but day-to-day work is AI-first.

Challenges that await you:

AI Security Program & Guidelines. Define and maintain Plata's AI security standards: acceptable-use policies for AI dev tools (Copilot, Cursor, Claude Code, ChatGPT), secure development guidelines for LLM-powered features, and data-handling rules for AI workloads. Keep guidelines current as the landscape evolves

Securing Customer-Facing AI Features. Threat-model and review designs for LLM-powered product features. Implement and validate defenses against prompt injection, prompt leakage, output-handling vulnerabilities, abuse and content-safety risks, and authorization bypass through AI surfaces. Integrate guardrails into CI/CD

Securing Internal AI Tools, Agents & Dev Tooling. Set access boundaries and data-scope policies for internal LLM apps, RAG systems, and agentic workflows, with audit logging and human-in-the-loop checkpoints for sensitive actions. Maintain the approved list of AI dev tools, configure data-leakage controls, run security reviews before adoption, and educate engineers on safe-use patterns

AI Vendor & Supply Chain Risk. Evaluate AI vendors and model providers. Review DPAs, data residency, retention, model provenance, and supply-chain risks for AI models and libraries. Maintain the AI vendor inventory

Threat Modeling, Detection & IR. Run threat models for new AI features and integrations, provide concrete recommendations, track remediation, and maintain an AI risk register. Partner with the SOC team to define AI-related security events

Collaboration, Education & Advocacy. Act as the in-house AI security expert. Train developers and product teams. Stay current on the AI security landscape (OWASP LLM Top 10, MITRE ATLAS, emerging research) and turn that into actionable internal guidance

What makes you a great fit:

AI Security (must-haves — this is the day-to-day)

2+ years total in DevSecOps, Cloud / Infrastructure Security, or Application Security, with demonstrable hands-on AI security work (production projects, contributions, research, or a credible self-driven portfolio)

Working knowledge of LLM application security: prompt injection (direct and indirect), output handling, jailbreaks, data leakage through model context, abuse and content-safety risks. Familiarity with OWASP LLM Top 10 and MITRE ATLAS

Hands-on experience with LLM APIs and agent or orchestration framework. Understanding of tool-use, RAG, and agent-permission models

Practical experience designing or evaluating AI guardrails (input/output filtering, allow-lists, rate limits, structured-output enforcement, evaluation harnesses)

Ability to threat-model AI systems — reason about data flow, trust boundaries, model and agent capabilities, and where injection or data leakage can occur. Translate threat models into concrete controls

Strong scripting skills in Python (the LLM ecosystem default) for building POCs, integrations, and guardrails

DevSecOps Baseline (required but not the day-to-day)

Solid understanding of AWS security fundamentals (IAM, VPC, S3, KMS, Secrets Manager, CloudTrail). Does not need senior-level depth — needs enough to secure AI workloads and converse credibly with infrastructure teams

Working knowledge of Kubernetes security at the deployment level (network policies, secrets, RBAC, image scanning). Does not need to operate clusters

CI/CD pipeline experience (GitLab CI preferred): integrating security checks, managing secrets, OIDC for cloud authentication

Familiarity with container security (image scanning, supply-chain integrity, SBOMs)

Comfort with IaC (Terraform) at a review-and-recommend level

Understanding of common AppSec vulnerabilities (OWASP Top 10) and secure-coding fundamentals

Your bonus skills:

AI red-teaming experience — hands-on jailbreaking and prompt-injection testing

LLM security tooling — production or POC experience with Promptfoo, NeMo Guardrails, Lakera Guard, Protect AI, or similar

AI governance frameworks — NIST AI RMF, ISO/IEC 42001, EU AI Act, OWASP MLSec Top 10

Fintech compliance context — PCI DSS, GDPR, SOC 2; experience translating compliance into engineering controls

Public contributions to AI security — published research, CTFs, OSS contributions, conference talks, or blog write-ups

Service mesh (Istio) for securing traffic between AI services

Certifications — CKS, AWS Security Specialty, OSCP, CISSP, GCSA, or vendor AI-security courses and certifications as they emerge

Our ways of working:

Innovative Spirit: A commitment to creativity and groundbreaking solutions

Honest Feedback: valuing open, transparent communication

Supportive Team: a strong, collaborative community

Celebrating Achievements: recognizing our wins together

High-Tech Environment : a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances

Our benefits:

Relocation support to one of our hubs — Cyprus, Spain, Serbia, or Kazakhstan — with assistance for the employee and their family

Flexible work from one of our offices or remote

Healthcare Coverage

Education Budget: Language lessons, professional training and certifications

Wellness Budget: Mental health and fitness activity reimbursements

Vacation policy: 20 days of annual leave and paid sick leave