Senior AI Security Expert

IN_Senior Associate_AI Security SME_Digital Integration_Advisory_Kolkata Line of Service Advisory Industry/Sector Not Applicable Specialism Microsoft Management Level Senior Associate Job Description & Summary At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively. Why PWC At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us . At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firms growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations. Job Description We are looking for a Senior AI Security Subject Matter Expert (SME) to provide technical AI tooling reviews and hands-on engineering support for our AI security program. This is a role for a "builder-defender"someone who can critically evaluate emerging AI technologies, architect secure integration patterns, and execute tactical security initiatives. The ideal candidate acts as a bridge between high-level security strategy and ground-level implementation, capable of performing deep-dive technical assessments one day and advising business stakeholders on safe AI adoption the next. In priority order, the SME will focus on three primary areas: 1. Review security architecture and controls for AI tools on an ad hoc request basis from the business. 2. Identify high-priority AI needs across our security domains and business to inform AI intake and adoption. 3. Assist teams with building AI into their processes, consulting on options, architecture, and implementation where needed. Responsibilities Technical Leadership & Delivery: Drive the technical implementation of security controls, moving beyond theory to practical application. execute on configuration, integration, and tuning of security platforms. Security Architecture & Design: Review and design secure patterns for AI system integration, ensuring alignment with enterprise security standards. Provide expert guidance on "build vs. buy" decisions and secure deployment models. Technology Evaluation & PoC Execution: Conduct rigorous technical assessments of emerging security tools and AI platforms. Define test cases, execute hands-on validation, and provide data-driven recommendations. Threat Modeling & Risk Assessment: Perform threat modeling for AI use cases, identifying risks related to prompt injection, data leakage, and model manipulation (OWASP Top 10 for LLM). Advisory & Governance: Serve as the primary technical advisor for business units proposing new AI use cases. Triage requests to determine appropriate security pathways (e.g., enterprise platform vs. custom development). Qualifications Required Experience Security Engineering: 5+ years of experience in Application Security, Cloud Security (AWS/Azure/GCP), or DevSecOps. AI/ML Security: Practical experience with Generative AI architectures (LLMs, RAG) and associated security risks. Familiarity with AI safety frameworks (NIST AI RMF, OWASP LLM). Technical Assessment: Proven track record of evaluating third-party vendors and technologies against strict security requirements. Technical Skills Scripting & Automation: Proficiency in Python or similar languages to write scripts for API testing, automation, or light prototyping. Architecture: Strong understanding of API security, OAuth/OIDC, containerization (Docker/Kubernetes), and cloud-native services. Tooling: Experience with Security Posture Management (CSPM/ASPM) tools and vulnerability scanners. Core Competencies Analytical Thinking: Ability to