Senior Technical Consultant - Forward Deployed AI Security Engineer

Thinkahead
Gurugram +1 more
Remote

Who this role is best for

Best suited to candidates with hands-on AI security deployment experience working in regulated industries.

Best fit for

  • Candidates with hands-on AI security deployment experience and a background in regulated industries
    — “Experience in regulated industries (financial services, healthcare, government) where AI use must be auditable.”
  • Individuals with a strong grasp of AI runtime assessments and security tool integration
    — “Deploy and operationalize AI security tools. Stand up, integrate, and harden Palo Alto Prisma AIRS (runtime firewall, API intercept, model security, agent security, red teaming, posture), Koi Agentic Endpoint Security, Onyx Secure AI Control Plane / Guardian Agent, Zenity (observability, AISPM, exposure management, runtime boundaries), Zscaler AI Security (AI Guard, asset management, zero-trust access to GenAI), and CrowdStrike Falcon AIDR and related Falcon modules.”
  • Candidates who can independently debug and operate AI security tools in customer environments
    — “Ability to operate independently on-site: debug failed connectors, certificates, proxies, agents, and policy conflicts without waiting for a back-office engineer.”

Things to consider

  • The role requires a significant on-site commitment and extensive travel with customers.
    — “Willingness to travel extensively and embed with customers for multi-day or multi-week deployments.”
  • Strong written and spoken English is a strict requirement, not just a preference.
    — “Exceptional written and spoken English. You can write a 20-page technical assessment, a one-page CISO brief, and a customer email with equal clarity.”

How to stand out

  • Highlight experience with adversarial testing and translating findings into enforceable guardrails.
    — “Run adversarial testing against LLMs, agents, and copilots. Convert findings into enforceable guardrails.”
  • Demonstrate deep familiarity with AI runtime assessment and security control design.
    — “Perform AI runtime assessments. Inventory AI applications, models, agents, copilots, MCP servers, plugins, and data flows.”
  • Showcase integration skills across SIEM, IAM, and logging pipelines.
    — “Integrate with the existing stack. Wire AI security telemetry into SIEM/SOAR, EDR/XDR, SSE/Zero Trust, IAM, CSPM, and ticketing.”
  • Emphasize ability to communicate complex AI security findings to CISOs and non-technical stakeholders.
    — “Brief CISOs, AI platform owners, legal/privacy, and engineers in clear, idiomatic English.”
  • Demonstrate experience with AI security frameworks like OWASP and MITRE ATLAS.
    — “Experience with AI red teaming methodologies, OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, and NIST AI RMF.”
Pace · Fast PacedCollaboration · HighAutonomy · HighDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Successfully deployed AI security tools
  • Designed and implemented control planes
  • Integrated AI security with existing infrastructure
  • Conducted adversarial testing
  • Produced clear and actionable reports
Typical background
Experience in cybersecurityBackground in AI and machine learningTechnical consulting experience

Skills & requirements

Required

AI SecurityRuntime AssessmentsAI Security Tools DeploymentControl Plane DesignIntegration With Existing StackRed TeamingCustomer Outcomes OwnershipCommunication

Preferred

Palo Alto Prisma AIRSKoi Agentic Endpoint SecurityOnyx Secure AI Control PlaneZenityZscaler AI SecurityCrowdstrike Falcon AIDR

Stack & domain

AI Runtime AssessmentsPalo Alto Prisma AIRSKoi Agentic Endpoint SecurityOnyx Secure AI Control Plane / Guardian AgentZenityZscaler AI SecurityCrowdstrike Falcon AIDRSiem/soarEdr/xdrSse/zero TrustIAMCSPMTicketingLlmsAgentsCopilotsPrompt InjectionJailbreaksData LeakageModel And Agent MisuseShadow AIUnsafe Autonomous ActionsArchitecture WorkshopsImplementation SprintsPolicy WorkshopsKnowledge TransferRunbooksDetection ContentOperating ModelAdversarial TestingGuardrailsCisosAI Platform OwnersLegal/privacyEngineersWriting SamplesLive BriefingCommunicationLeadershipProblem-solvingCollaborationAttention To DetailProactive ApproachFinanceSecurityAICloud InfrastructureAutomationAnalyticsSoftware DeliveryDigital Transformation

About the role

Original posting from Thinkahead via Lever

AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.

At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD. 

We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived. 

We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD. 

What You Will Do:

  • Perform AI runtime assessments. Inventory AI applications, models, agents, copilots, MCP servers, plugins, and data flows. Evaluate prompt/response paths, tool-calling behavior, identity chains, and attack surface. Produce scored findings covering prompt injection, jailbreaks, data leakage, model and agent misuse, shadow AI, and unsafe autonomous actions.
  • Deploy and operationalize AI security tools. Stand up, integrate, and harden Palo Alto Prisma AIRS (runtime firewall, API intercept, model security, agent security, red teaming, posture), Koi Agentic Endpoint Security, Onyx Secure AI Control Plane / Guardian Agent, Zenity (observability, AISPM, exposure management, runtime boundaries), Zscaler AI Security (AI Guard, asset management, zero-trust access to GenAI), and CrowdStrike Falcon AIDR and related Falcon modules.
  • Design the control plane. Map traffic through AI gateways, inline intercepts, endpoint agents, SaaS connectors, and identity providers. Define allow/block/human-in-the-loop policies for prompts, tool use, MCP calls, package and extension installs, and agent actions.
  • Integrate with the existing stack. Wire AI security telemetry into SIEM/SOAR, EDR/XDR, SSE/Zero Trust, IAM, CSPM, and ticketing. Correlate AI events with endpoint, identity, and network signals so detections are actionable, not noisy.
  • Red team and validate. Run adversarial testing against LLMs, agents, and copilots. Convert findings into enforceable guardrails. Re-test after deployment and prove residual risk is accepted or closed.
  • Own customer outcomes. Embed with the account. Drive architecture workshops, implementation sprints, policy workshops, and knowledge transfer. Leave behind runbooks, detection content, and an operating model the customer can run without you.
  • Communicate with precision. Write assessment reports, risk memos, architecture decision records, and board-ready summaries. Brief CISOs, AI platform owners, legal/privacy, and engineers in clear, idiomatic English. Escalate risk without inflating it.
  • Feed product and practice. Return field patterns, integration gaps, and detection ideas to product, threat research, and delivery teams. Help standardize playbooks for repeatable AI security deployments.

Required Qualifications:

  • Exceptional written and spoken English. You can write a 20-page technical assessment, a one-page CISO brief, and a customer email with equal clarity. Grammar, tone, structure, and technical precision are non-negotiable. Candidates will be evaluated on writing samples and live briefing quality.
  • Hands-on deployment experience with multiple of the following platforms in production or customer environments: Palo Alto Prisma AIRS, Koi Agentic Endpoint Security, Onyx Security, Zenity, Zscaler AI Security, and CrowdStrike (Falcon AIDR, Falcon XDR/NG-SIEM, or adjacent Falcon modules used to secure AI runtime).
  • Demonstrated ability to perform AI runtime assessments: discovering AI assets, inspecting prompt and tool-call traffic, identifying prompt injection / jailbreak / data-exfiltration / agent-abuse paths, and translating findings into controls.
  • 5+ years in cybersecurity engineering, security architecture, or technical consulting, with at least 2 years focused on cloud, application, or AI/LLM security.
  • Working fluency with modern AI architecture: LLMs and SLMs, RAG, agents and multi-agent systems, MCP servers and tools, copilots (e.g., Microsoft 365 Copilot, GitHub Copilot, Cursor, Claude Code), model gateways, and common cloud AI platforms (AWS Bedrock, Azure AI Foundry / OpenAI, Google Vertex AI).
  • Strong integration skills across identity (Okta, Entra ID), endpoints, network/SSE, APIs, Kubernetes or container platforms, and logging pipelines.
  • Ability to operate independently on-site: debug failed connectors, certificates, proxies, agents, and policy conflicts without waiting for a back-office engineer.
  • Willingness to travel extensively and embed with customers for multi-day or multi-week deployments.
  • Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.

Preferred Qualifications:

  • Prior forward-deployed, professional-services, or resident-engineer experience (Palantir-style FDE, vendor PS, or Big Four cyber delivery).
  • Vendor certifications or deep product credentials in Palo Alto Networks, Zscaler, CrowdStrike, or adjacent SSE/XDR platforms.
  • Experience with AI red teaming methodologies, OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, and NIST AI RMF.
  • Scripting and automation in Python and one of Bash, PowerShell, or Go. Comfort reading application and infrastructure-as-code.
  • Familiarity with DLP, DSPM, secrets detection, model scanning, and software supply-chain controls as they apply to AI artifacts (models, packages, extensions, MCP servers).
  • Experience in regulated industries (financial services, healthcare, government) where AI use must be auditable.
  • Public speaking, workshop facilitation, or published technical writing on AI security.

Core Tooling You Will Deploy and Operate:

  • Palo Alto Prisma AIRS: AI runtime security (network and API intercept), model security, agent security, AI red teaming, posture management, and AI gateway controls.
  • Koi Agentic Endpoint Security: Discovery and risk scoring of endpoint-resident AI software, packages, extensions, local models, agents, and MCP servers; install governance and session-aware AIDR.
  • Onyx: Secure AI control plane — continuous AI asset discovery, session capture, identity-aware attribution, and Guardian Agent enforcement (allow, redirect, require approval, or block).
  • Zenity: AI agent observability, AI security posture management (AISPM), exposure management, runtime boundaries, and coverage across SaaS copilots, custom agents, and coding agents.
  • Zscaler: Zero Trust access to GenAI, AI asset management, AI Guard runtime inspection of prompts and responses, and correlation of AI-event telemetry with the Zero Trust Exchange.
  • CrowdStrike: Falcon AIDR for runtime detection and response across endpoint, SaaS, and cloud AI use; integration with Falcon XDR / Next-Gen SIEM for investigation and automated response.

Why AHEAD:

Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between.

We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning.

India Employment Benefits include: 

Comprehensive health insurance coverage for employees, with options to extend coverage to dependents

Paid time off and company holidays, along with additional leave benefits as per policy

Flexible work arrangements, supporting work-life balance

Learning and development opportunities to support continuous growth and upskilling

Employee wellness initiatives and programs focused on physical and mental well-being

Retirement and statutory benefits in line with India regulations

Inclusive and people-first culture, with a strong focus on collaboration and ownership

Source: Thinkahead careers (Lever)

Similar roles

More roles at Thinkahead