AI Security Consultant

Overview

In this AI Security Consultant role, you help clients secure AI-enabled environments, including LLM integrations and autonomous workflows. You combine cyber security expertise with practical AI knowledge to assess risks, design safeguards, and guide governance across cloud, data, and operations. You’ll translate complex risks for senior stakeholders and support secure AI adoption through pragmatic controls and blueprints. This position sits in PA’s Digital & Data team, offering varied client work, learning, and a collaborative culture focused on impactful, responsible AI security.

Pay / Benefits

• Private healthcare for you and family
• 25 days annual leave (+ 0.5 day on Christmas Eve)
• Generous company pension
• Community and charity initiatives
• Annual performance-based bonus
• PA share ownership

Responsibilities

• Conduct cyber security assessments across technology estates, cloud environments, applications, networks, identity platforms, and processes
• Review security architectures and provide pragmatic, risk-aligned recommendations
• Design and implement security controls (access management, data protection, logging, vulnerability management, incident response, third-party risk)
• Develop actionable improvement roadmaps and translate findings for senior stakeholders
• Assess AI security risks in AI-enabled apps, LLMs, agents, and autonomous workflows
• Threat model agentic systems and advise on secure AI development patterns (least privilege, sandboxing, auditability, human-in-the-loop)
• Define governance and assurance across AI lifecycle from experimentation to production
• Identify opportunities to safely use AI to enhance security operations (alert triage, threat intel, incident summarisation)
• Evaluate and adopt AI-enabled security tools with proper safeguards
• Create playbooks, guardrails, and operating models for responsible AI use in SOC, GRC, vulnerability management, and IR

Key requirements

• Strong background in cyber security consulting, security architecture, risk management, or security operations
• Understanding of identity and access management, cloud security, application security, data protection, vulnerability management, incident response, and security monitoring
• Ability to assess environments and provide clear, prioritized recommendations
• Experience communicating with technical and senior business stakeholders
• Knowledge of AI, generative AI or LLM-enabled systems (data interaction, prompts, APIs, tools, users)
• Awareness of AI security risks (prompt injection, data leakage, excessive agency, unsafe output handling, model/data poisoning, vector weaknesses, AI supply chain risk)
• Ability to threat model complex systems including AI-assisted workflows
• Strong written and verbal communication to explain risks clearly

• Clear and concise communication
• Stakeholder engagement
• Curiosity and practical problem-solving
• Cyber security consulting
• Security architecture and risk management
• AI security (LLMs, agentic systems, prompts, tool use)

…