Senior AI Platform Security Engineer

Senior AI Platform Security Engineer

BMW Group

Munich, Germany

What awaits you?

• You take strategic ownership of an AI Moderation Layer as a hardened platform service: define architecture standards, security policies, SLAs/SLOs, and ensure global scalability and integration with AI platform services.
• Leading the design of a multi-layered defense strategy, you protect against jailbreaks, prompt injection, data exfiltration, and tool misuse through advanced input/output scanners, safety filters, and autonomous agents.
• You establish and continuously improve the security lifecycle for LLMs/Agents: threat modeling, attack simulations, red teaming, LLM-specific pentests, automated security assessments, and incident response frameworks.
• Acting as a trusted advisor, you collaborate with legal, compliance, and data protection teams to shape governance and regulatory alignment for AI security.
• You drive operational excellence: define KPIs, implement canary rollouts, optimize cost/performance, scale to additional data sources, and ensure 24/7 reliability.
• Mentoring and guiding an agile team of engineers and data scientists, you foster best practices in architecture, security, and platform engineering.
• Ensuring enterprise-grade quality, you oversee platform services in terms of architecture, code, IT security, compliance, documentation, and operational KPIs.

What should you bring along?

• University degree in computer science, mathematics, or a comparable field with an IT focus, or equivalent qualification.
• 8+ years of experience in software or platform security and architecture in cloud environments (Azure/AWS), including containerized microservices, CI/CD pipelines, GitOps, Infrastructure as Code, service mesh, SLOs, high availability, and disaster recovery.
• Deep expertise in LLM and agent security: advanced protection against jailbreaks, prompt and indirect injection, input/output scanners, policy engines, and moderation strategies.
• Proven leadership in security lifecycle and compliance: threat modeling, red teaming, LLM-specific pentests, automated security assessments in CI/CD, telemetry, alerting, and incident response.
• Strong engineering background with architectural decision-making: Python, C# or TypeScript, REST and event-driven systems, observability practices, and experience with agile methods.
• Exceptional communication and stakeholder management skills; business fluent English required, German is a plus.
• Demonstrated ability to lead cross-functional initiatives and mentor teams in complex, high-security environments.