Senior AI Security Engineer (m/f/d) - GenAI & AI Platform Security

Das ist der Job

To support this endeavor, a central Data & AI function is being established.

Darum lohnt es sich

Working closely with our Data & AI team, IT, engineering teams, and AI product owners, you will help establish the security foundations, governance frameworks, and technical controls required to safely scale AI-powered applications, AI agents, and GenAI solutions across the firm.

Feel at home working with our helpful, enthusiastic colleagues who have great team spirit. Satisfy your need for adventure with our opportunities to live and work abroad in one of our many international offices Enjoy our benefits, such as hybrid working, daycare allowance, corporate discounts, and wellbeing support (e.g.

Partner closely with Data & AI, Engineering, and IT teams to ensure secure, scalable, and compliant development and deployment of AI-powered solutions. Support the design and development of AI agents using modern frameworks and tooling such as LangSmith and related orchestration, monitoring, and evaluation platforms.

Advise project teams on secure patterns for integrating enterprise data, APIs, Retrieval-Augmented Generation (RAG) architectures, vector databases, and external services into AI applications.

Experience securing cloud-native environments and modern infrastructure, including CI/CD pipelines, containerized workloads, Identity & Access Management (IAM), secrets management, and runtime security controls.

Overview Senior AI Security Engineer (m/f/d) - GenAI & AI Platform Security | In Germany – Berlin, Bonn, Frankfurt/Main, Hamburg, Cologne, Munich Simon-Kucher is enabling its employees with generative AI based solutions to improve productivity.

As a Senior AI Security Engineer (m/f/d) - GenAI & AI Platform Security you will play a key role in ensuring that our AI ecosystem is secure by design. What makes us special Advance your career with exciting professional opportunities in our thriving company with a startup feel.

Voice your unique ideas in a corporate culture defined by openness and integrity. Enjoy the opportunity to work from abroad (workation). Broaden your perspective with our extensive training curriculum and learning programs (e.g. LinkedIn Learning). Speak your mind in our holistic feedback and development processes (e.g. 360-degree feedback).

Headspace). Unwind in our break areas where you can help yourself to the healthy snacks and beverages provided. See another side of your coworkers at our frequent employee events and highly anticipated World Meeting and Holiday Party.

How you will create an impact Drive the security-by-design approach for AI solutions across Simon-Kucher by defining and continuously evolving security standards, controls, and guardrails for AI agents, LLM-driven applications, and Generative AI solutions, aligned with industry best practices such as the OWASP Top 10 for LLM Applications.

Assess AI solution architectures with a focus on identity and access management, data protection, model security, secure integrations, vector database security, and infrastructure hardening.

Establish and operationalize DevSecOps practices across the Secure Software Development Lifecycle (SSDLC), integrating automated security controls and testing capabilities such as SAST, DAST, and Software Composition Analysis (SCA) into CI/CD pipelines and cloud-based AI environments.

Conduct security reviews, threat modeling workshops, and risk assessments to identify and mitigate AI-specific risks, including prompt injection, data leakage, model misuse, overprivileged access, and third-party dependencies.

Act as a trusted advisor to product owners, architects, developers, and business stakeholders on secure AI adoption, AI governance, and compliance requirements, translating internal policies and emerging regulations such as the EU AI Act into practical development standards.

About you Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, Data Science, or a related field. 7+ years of experience in cybersecurity, application security, cloud security, security engineering, or a comparable role.

Strong understanding of Application Security, Secure Software Development Lifecycle (SSDLC), secure coding practices, and DevSecOps methodologies, including hands-on experience with security testing capabilities such as SAST, DAST, and Software Composition Analysis (SCA).

Experience building, reviewing, or securing LLM-driven applications, AI agents, and Generative AI solutions using frameworks such as LangSmith or similar ecosystems, combined with knowledge of AI Security, AI threat modeling, enterprise AI security controls, and industry standards such as the OWASP Top 10 for LLM Applications.

Fluent English communication skills (C1+) with the ability to translate complex security requirements into pragmatic guidance for technical and non-technical stakeholders. Note: For data protection reasons, we cannot accept applications via email. Please use the official Apply button to submit your application.

About Simon-Kucher Simon-Kucher is a global consultancy with more than 2,200 employees in 30+ countries. We are a trusted commercial advisor focused on unlocking better growth, combining consulting expertise, growth specialization, and technology to scale lasting impact.

We optimize every lever of commercial strategy — product, pricing, innovation, marketing, and sales — based on what customers want and value. Your personal contact Christina Jaup-Schwilk recruitment.germany(at)simon-kucher.com #J-18808-Ljbffr