AI Architect – Security Automation (AI for Security)

About the role

This is a hands‑on AI‑for‑Security engagement with a regulated iGaming group. Their security team already runs an AI‑driven offensive‑security capability and needs an expert to challenge, improve and own the methodology. You will work directly with the CISO and security engineers to evaluate and enhance their pipeline.

Key responsibilities

• Join joint sessions with client security engineers to harden the end‑to‑end AI‑driven offensive pipeline (recon → verification → exploitation → sandboxed execution).
• Design and refine the exploitation agent, including LLM planning, exploit selection, validation and parallel sandbox orchestration.
• Benchmark local/open LLMs (Kimi, GPT‑OSS, MiniMax, DeepSeek) against frontier models for cost‑per‑finding, accuracy, latency and hardware sizing.
• Shape the runtime anomaly‑detection layer, defining valuable intrusion/privilege‑escalation patterns and designing automated response actions.
• Deliver a quick‑win PoC (e.g., automated dependency vulnerability scan) and translate findings into a technical proposal and roadmap for CISO/CTO audience.

Required profile

• 3+ years of hands‑on offensive security, vulnerability research and red‑team experience.
• Proven experience building or operating AI/LLM‑driven security automation pipelines.
• Cloud hyperscaler experience (AWS preferred) and ability to run self‑hosted open models on GPU hardware.
• Client‑facing consulting background, comfortable leading CISO‑level technical discussions.

Required skills

• Python and shell scripting.
• Offensive tools: Nmap, Nuclei, Katana, Acunetix, Metasploit, Burp Suite, Kali Linux utilities.
• LLM agent development, prompt/flow design, tool‑use orchestration.
• Running and tuning open‑source models (Kimi, GPT‑OSS, MiniMax, DeepSeek) including quantization and throughput optimization.
• AWS services, container isolation and secure inference hosting.