Head of Security Engineering

• Reporting directly to the VP of Business Information Security Officer (EDO BISO), you will lead and mentor a high-performing team of security engineers specializing in cloud security, application security (AppSec), and AI/ML security. You will foster a culture of automation, accountability, and proactive defence while remaining deeply hands-on in architecture, remediation, and incident response.
• This is a player-coach role: you will design, implement, and operate secure systemsnot just advise.

Responsibilities

• Define and execute the technical security roadmap across cloud environments (AWS, GCP, Azure) and AI/ML systems, while architecting secure-by-design patterns.
• Lead threat modelling, red team exercises, and adversarial simulations for generative AI, promoting secure SDLC adoption across engineering teams.
• Secure the ML model lifecycle against various threats and implement guardrails for generative AI, ensuring data protection through encryption and differential privacy.
• Build and mentor a team of cloud, AppSec, and AI security engineers, conducting regular performance coaching and establishing KPIs for vulnerability management.
• Lead incident response for security events and maintain security observability, ensuring thorough post-mortems and remediation.
• Collaborate with AI, Data, and Product leaders to embed security in roadmaps and represent security in executive forums and audits.
• Ensure compliance with security standards through automated evidence collection.

Required Qualifications

• 12-15 years of progressive experience in security engineering, with 5+ years in leadership roles.
• Certifications: CISSP, , CSSLP, AWS/GCP Security Specialty, or equivalent.
• Deep expertise in: Cloud security (AWS, GCP, Azure). Application security (OWASP Top 10, SAST/DAST/SCA) container security API security, AI/ML security (adversarial ML, model integrity and hardening)
• Proven ability to remediate vulnerabilities end-to-end, not just identify them.
• Hands-on experience with threat modeling (STRIDE, DREAD), red teaming, and incident response.
• Programming skills (Python, Go, or similar) for scripting and automation.
• Experience with secure SDLC, DevSecOps, and shift-left practices.

Preferred Skills

• Experience securing RAG architectures, vector databases, and prompt engineering workflows.