Security Operations & AI Security ConsultantInitial 3-6 months (renewable yes)Hybrid role (mainly remote)Role OverviewThis role balances operational security with AI governance and service ownership backup:45% Security Operations & Backlog Reduction: Daily sec-ops, migrations, and remediation.30% Service Owner Backup Coverage: Independent operation and handover of core security services.25% Secure AI Deployments & Product Lifecycle Framework: AI intake triage, LLM threat modeling, and embedding security across the SDLC.Key ResponsibilitiesSecurity Operations & InfrastructureVulnerability & Exposure Management: Execute monthly scans and patch reporting; support platform migrations; assess vendor advisories/CVEs; track EOL asset remediation.Detection & Endpoint Security: Assist endpoint tenant migration and legacy platform retirement; onboard log sources (including AI telemetry) into next-gen SIEM; handle L2 alert/incident triageNetwork & Certificate Security: Apply firewall hardening rules; deliver TLS/PKI lifecycle management, inventory, and domain automation.Testing & Backlog Remediation: Drive pen-test/red-team findings to closure; take ownership of unassigned backlog items (focusing on AWS guardrails and playbooks).AI Security & Product LifecycleAI Security Governance: Perform triage for AI use cases via the intake process; maintain the AI capability register; set pre-launch identity, logging, and rate-limiting controls.AI Threat Modeling: Model agentic/GenAI risks (prompt injection, data leakage, autonomy, cost) using standard LLM frameworks; track AI-specific test remediation (e.g., AI chatbots).Product Security (SDLC): Embed security stage-gates across transformation workstreams (prototyping, dependency management, go-live, decommission); provide self-service security patterns/checklists and feed product health metrics.Operations & Knowledge TransferMaintain current runbooks, security plans, and knowledge base articles.Update weekly security task lists for CISO reporting.QualificationsRequiredExperience: 5+ years in security engineering/ops (2+ years in medium/large enterprise).Core SecOps: End-to-end vulnerability management, EDR/next-gen SIEM operations, firewalls, and TLS/PKI.Cloud & Automation: Foundational AWS (IAM, SCPs, security groups, CSPM findings); ability to write clear runbooks.AI & SDLC Security: Securing production GenAI/LLM deployments (threat modeling, guardrails); embedding security requirements in SDLC/product delivery.Languages: Fluent English (French is an advantage).Certifications: CISSP, CCSP, GIAC, CySA+, or AWS Security.Technical Exposure: Python automation, platform migrations, F5 BIG-IP, WAFs, PAM, IAM.Frameworks & Compliance: ISO 27001, NIST CSF, ISO/IEC 42001, NIST AI RMF, EU AI Act, or Swiss data-protection standards. #J-18808-Ljbffr
Security Consultant - Security Operations & AI Security in Genève Arbeitgeber: Saunders Scott
Unser Unternehmen ist ein hervorragender Arbeitgeber, der Ihnen die Möglichkeit bietet, bedeutende Digitalisierungsprojekte im Krankenhaussektor zu leiten. Mit einem starken Fokus auf Mitarbeiterentwicklung und einer unterstützenden Unternehmenskultur fördern wir Ihre berufliche Entfaltung durch umfassende Einarbeitung und enge Zusammenarbeit mit erfahrenen Kollegen. Zudem genießen Sie die Flexibilität, Projekte in ganz Deutschland zu betreuen, was Ihnen eine abwechslungsreiche und dynamische Arbeitsumgebung bietet.
