AI Security Consultant

Location: London, UK; hybrid working with attendance at the office or client site at least 2 days per week. Applicants for applicable UK security-cleared roles must be British citizens or have maintained continuous UK residency for the past 5 years.

Company

hirify.global is an interdisciplinary consulting firm combining strategy, design, science, engineering, technology, and innovation across sectors including defence, security, financial services, government, healthcare, and transport.

What you will do

• Conduct cybersecurity assessments across cloud environments, applications, networks, identity platforms, and operational processes.
• Review security architectures and recommend controls for access management, data protection, monitoring, vulnerability management, incident response, and third-party risk.
• Assess AI-enabled applications, LLM integrations, autonomous agents, and AI-connected business processes for security risks.
• Threat-model agentic workflows involving APIs, tools, data retrieval, decision-making, and automated actions.
• Design AI security guardrails including permission boundaries, sandboxing, auditability, validation, and human-in-the-loop controls.
• Identify and implement safe uses of AI for SOC operations, threat intelligence, incident response, reporting, vulnerability prioritisation, and control testing.

Requirements

• Strong background in cybersecurity consulting, security architecture, risk management, or security operations.
• Knowledge of identity and access management, cloud security, application security, data protection, vulnerability management, incident response, and security monitoring.
• Experience assessing technical environments, producing prioritised recommendations, and engaging technical and senior business stakeholders.
• Understanding of AI, generative AI, or LLM-enabled systems and their interaction with data, prompts, APIs, tools, and users.
• Awareness of AI security risks including prompt injection, sensitive information disclosure, excessive agency, unsafe outputs, poisoning, vector or embedding weaknesses, and supply-chain risk.
• For applicable UK security-cleared roles: British citizenship or 5 years of continuous UK residency may be required; background checks and Baseline Personnel Security Standard clearance are required.

Nice to have

• Experience with AI governance, responsible AI, model risk management, or AI assurance.
• Familiarity with NIST AI RMF, OWASP LLM and Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls, or cloud security frameworks.
• Experience with SOC operations, SIEM/SOAR, detection engineering, threat intelligence, or incident response.
• Knowledge of retrieval-augmented generation, model APIs, vector databases, agent frameworks, or automation tools.
• Relevant cybersecurity or AI-security certifications such as CISSP, CISM, CCSP, GIAC, or ISO 27001 qualifications.

Culture & Benefits

• Interdisciplinary and collaborative work across multiple client sectors and technology stacks.
• Technical career progression, peer support, coaching, mentoring, and a learning budget for courses and certifications.
• Private healthcare for employees and families.
• 25 days of annual leave, an additional half day on Christmas Eve, and the option to buy 5 extra days.
• Company pension, performance-based bonus, PA share ownership, and tax-efficient benefits.
• Opportunities to participate in community and charity initiatives.

Hiring process

• Initial call with a technology recruiter.
• Two 60-minute competency or technical interviews, covering both formats.
• Final 60-minute meeting with a PA leader including a mini case study and client-centricity discussion.