• Be part of an international company.
• Career progression.

Sobre o nosso cliente

The organisation is an AI-driven Procurement company.

Descrição

• Define the security architecture for agent-supported software development and delivery, including generated code, automated testing, build processes, infrastructure changes, deployment and operational actions.
• Design the trust and control architecture for autonomous agents, orchestration platforms and AI-enabled workflows, including identity, delegated authority, tool access, credential use and policy enforcement.
• Establish security patterns for autonomous execution, defining where actions can run independently and where deterministic validation, additional authorization or human approval is required.
• Design security controls for data and knowledge platforms, including knowledge graphs, retrieval systems, derived information, provenance, context assembly, tenant boundaries and access enforcement.
• Define identity and authorization models across users, workloads, services, agents and tools, including non-human identities, short-lived credentials, least privilege and delegated access.
• Establish software supply chain security across source code, generated code, dependencies, models, build environments, infrastructure definitions, artifacts and deployments.
• Design controls for emerging AI and automation threats, including prompt injection, malicious or poisoned context, tool misuse, excessive agency, privilege escalation and cross-tenant risks.
• Define reusable security capabilities and engineering patterns for application, platform and data teams rather than relying on one-off security implementations.
• Establish technical security architecture across cloud platforms, APIs, Kubernetes, networking, enterprise integrations and supporting technology services.
• Lead technical threat modelling and define the audit, observability and provenance requirements needed to reconstruct and investigate automated decisions and actions.

Perfil ideal

• Strong experience in security architecture across cloud-native, application or platform environments.
• Deep understanding of identity, authorization, trust boundaries, least privilege and policy enforcement in distributed systems.
• Experience with workload identity, non-human identities, credential management, federation and delegated access.
• Strong understanding of secure software delivery, continuous integration and deployment, infrastructure as code and software supply chain security.
• Ability to design security controls for systems that can autonomously consume information, make decisions, invoke tools and perform actions.
• Strong understanding of cloud platforms, APIs, containers, Kubernetes, networking and modern distributed architectures.
• Understanding of AI and autonomous-system security risks, including prompt injection, untrusted context, tool misuse, excessive permissions and unsafe delegation.
• Understanding of data security across relational, graph and retrieval architectures, including authorization, provenance, derived information and tenant isolation.
• Ability to translate threat models, security policy and risk requirements into practical architecture, reusable engineering standards and platform capabilities.
• Strong communication in English and collaboration skills, with the ability to provide senior technical security leadership across engineering, data, platform and security teams.

Vantagens

• Permanent contract.