AI & ML Engineer (Cybersecurity)

Role overview

Location and working arrangement

• The role is based in Cheltenham and requires office attendance twice a month, with hybrid working.

Compensation

• Competitive salary and package, depending on level of experience; no salary cadence or amount is specified.

Responsibilities

• Configure, evaluate and tune LLMs for security use cases, including prompt design, RAG and tool/function calling.
• Build and maintain AI agents and workflows integrated with SOAR, SIEM and EDR tooling.
• Protect AI systems against adversarial inputs, prompt injection and jailbreaks; apply secure architecture and development principles.
• Implement governance for data handling, audit logging, human-in-the-loop controls and regulatory compliance.
• Optimize LLM API and infrastructure costs through caching, model tiering and guardrails.
• Collaborate with stakeholders to prototype and refine solutions, and document capabilities for ongoing management.

Required experience and skills

• At least 2 years of AI/ML engineering experience.
• Production experience building and deploying AI agents or LLM applications, with observability and evaluation mechanisms.
• Experience with an enterprise AI platform such as Azure AI Foundry, AWS Bedrock or Google Vertex AI.
• Strong LLM and vector database knowledge, including context windows, sampling, system prompts and tool/function calling.
• End-to-end RAG and document parsing pipeline experience, including unstructured data.
• Knowledge of AI security risks and mitigations, and experience with enterprise governance frameworks.
• Programming proficiency in one or more languages, such as Python; familiarity with AI/ML libraries and REST APIs.

Additional qualifications

• Infrastructure-as-code experience and knowledge of SOAR, SIEM or EDR are advantageous.
• Collaborative problem-solving, self-motivation, pragmatism and ability to manage competing deadlines are sought.

Security clearance

• Any offer is subject to satisfactory BPSS and SC security clearance. The posting states this requires five years of continuous UK address history at application.