Job Title – AI Security Engineer
Location: Kharadi, Pune, India.
Life Unlimited. At Smith+Nephew, we design and manufacture technology that takes the limits off living.
The AI Security Engineer is a hands-on individual contributor reporting to the AI Security Manager. The role is directly assigned to enterprise AI projects, embedding security into the design, build, and deployment of web applications, AI agents, and their integrations with enterprise data and systems. Working closely with development and platform teams, the AI Security Engineer applies Microsoft security capabilities and AI security best practice to identify risks, define practical security requirements, and confirm the right controls are in place before and after release.
What will you be doing?
• Serve as the dedicated security engineer on assigned enterprise AI projects, supporting delivery teams from design through deployment and ongoing operation.
• Perform threat modelling and security design reviews for web applications, AI agents, copilots, and their integrations with enterprise data and systems.
• Define and validate security requirements for AI solutions built on Microsoft platforms, including Azure, Microsoft Foundry, Copilot Studio, Microsoft 365 Copilot, and Power Platform.
• Review proposed AI tools and solution architectures against the approved tool list and the enterprise architecture capability map, and advise on approval status.
• Identify and help mitigate AI-specific and agentic AI risks such as prompt injection, data leakage, insecure tool and plugin use, MCP and tool integration risks, and excessive agent permissions, aligned with frameworks such as OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and NIST AI RMF.
• Guide implementation of identity, access, and data protection controls, including Microsoft Entra ID, managed identities, Azure Key Vault, Microsoft Purview, and network isolation.
• Define and validate agent identity and permission models, ensuring each AI agent uses least-privilege access to tools and data.
• Guide implementation of AI runtime protections such as an AI gateway or Azure API Management, Prompt Shields, and Azure AI Content Safety.
• Support secure development practices through code and configuration reviews, security testing, and tracking remediation of findings with development teams.
• Coordinate penetration testing for AI applications, including scoping, managing external testers, and tracking findings to closure.
• Use Microsoft security tooling such as Microsoft Defender for Cloud and Microsoft Sentinel to help monitor AI workloads and support investigation of AI-related security issues.
• Own and maintain AI incident response runbooks, and support incident handling for AI-related security events.
• Document security assessments, risks, and residual risk decisions, and escalate significant issues to the AI Security Manager.
• Contribute to AI security standards, reusable secure design patterns, and guidance, and share best practice with project teams.
What will you need to be successful?
- Education: Bachelor’s degree in computer science, Engineering, Information Systems or equivalent experience.
- Licenses / Certifications: Microsoft security or AI certifications preferred. CISSP, CISM, or equivalent preferred.
- Experience: 4 to 7 years in application security, cloud security, or security engineering, including hands-on work securing cloud or AI-enabled applications.
- Domain Expertise:
- Cybersecurity, application security, and cloud security engineering, with working knowledge of risk management and compliance.
- Understanding of AI, Machine Learning, Generative AI, AI agents, and associated security risks.
- Hands-on experience with Microsoft Azure and Microsoft 365 security controls, including Microsoft Entra ID, Defender, Purview, and Sentinel.
- Familiarity with Microsoft AI platforms such as Microsoft Foundry, Azure OpenAI, Copilot Studio, and Power Platform, and their security configuration requirements.
- Understanding of agentic AI security, including agent identities and permissions, MCP and tool security, AI gateways, and Prompt Shields / Azure AI Content Safety.
- Experience securing web applications and APIs, including threat modelling, secure code review, and security testing.
- Ability to translate security requirements into practical guidance for development, platform, data, privacy, and compliance teams.
- Agile / Digital Experience:
- Experience working within Agile delivery environments and product-centric organisations.
- Skilled at translating requirements into deliverable outcomes and prioritised roadmaps.
- Experience working with cross-functional teams to deliver technology and security initiatives.
- Individual Skills:
- Strong collaborator who takes ownership of assigned project outcomes.
- Excellent communication and influencing skills.
- Analytical problem solver with strong decision-making capability.
- Ability to balance innovation, risk management, and business priorities.
- Mindset & Behaviours:
- Exercises sound judgment and make clear, timely decisions in ambiguous or evolving situations.
- Applies critical thinking to interpret complex information, make sense of ambiguity, and guide clear action.
- Demonstrates ethical reasoning and accountability in decision-making and delivery.
- Brings creativity and strategic imagination to reframe problems, explore opportunities, and shape new solutions.
- Shows learning agility and adaptability in response to change, feedback, and new information.
You. Unlimited.
We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve.
Inclusion + Belonging - Committed to Welcoming, Celebrating and Thriving. Learn more about our Employee Inclusion Groups on our website https://www.smith-nephew.com/
Other reasons why you will love it here!
- Your Future: Major Medical coverage + Policy exclusions and insurance non-medical limit. Educational Assistance.
- Work/Life Balance: Flexible Personal/Vacation Time Off, Privilege Leave, Floater Leave.
- Your Wellbeing: Parents / Parents in Law’s Insurance, Employee Assistance Program, Parental Leave.
- Flexibility: Hybrid Work Model (For most professional roles)
- Training: Hands-On, Team-Customized, Mentorship
- Extra Perks: Free Cab Transport facility for all employees, One Time Meal provided to all employees as per shift. Night Shift Allowances.
#L1-YS1
Stay connected by joining our Talent Community.
We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day.
Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N.
Explore our website and learn more about our mission, our team, and the opportunities we offer.
Skills Required
- Bachelor's degree in Computer Science, Engineering, Information Systems, or equivalent experience
- 4 to 7 years of experience in application security, cloud security, or security engineering
- Hands-on experience securing cloud or AI-enabled applications
- Cybersecurity, application security, and cloud security engineering experience
- Working knowledge of risk management and compliance
- Hands-on experience with Microsoft Azure and Microsoft 365 security controls
- Experience with Microsoft Entra ID, Microsoft Defender, Microsoft Purview, and Microsoft Sentinel
- Familiarity with Microsoft Foundry, Azure OpenAI, Copilot Studio, and Power Platform
- Understanding of agentic AI security, agent identities and permissions, MCP and tool security, AI gateways, Prompt Shields, and Azure AI Content Safety
- Experience securing web applications and APIs, including threat modeling, secure code review, and security testing
- Ability to translate security requirements into practical guidance for development, platform, data, privacy, and compliance teams
- Experience working in Agile delivery environments and product-centric organizations
- Experience delivering technology and security initiatives with cross-functional teams
- Microsoft security or AI certifications
- CISSP, CISM, or equivalent certification
Smith & Nephew Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Smith & Nephew and has not been reviewed or approved by Smith & Nephew.
-
Healthcare Strength — Medical, dental, and vision plans are paired with a global mental‑health program for employees and families, indicating a robust core health package.
-
Retirement Support — U.S. employees have access to a 401(k) with company contributions, and share plans complement long‑term savings.
-
Leave & Time Off Breadth — Generous holiday, paid volunteering leave, and flexible work models point to broad time‑off options.
Smith & Nephew Insights
What We Do
Smith+Nephew is a global medical technology company. We design and manufacture technology that takes the limits off living. We support healthcare professionals to return their patients to health and mobility, helping them to perform at their fullest potential. From our first employee and founder, T.J. Smith, to our team today, it’s our people who make Smith+Nephew a unique place. Yes, we love to innovate and develop exciting technologies, and we offer competitive salaries and progressive benefits. But it’s our culture - of Care, Collaboration and Courage - that really sets us apart. Through a spirit of ownership and can-do attitude, we work together to win.. We’re a company of people who care about each other, about our customers and their patients, and about our communities. Together, we fulfill our shared purpose of Life Unlimited. Please note: not all products referred to may be approved for use or available in all markets.
