Senior AI Application Security Engineer
A senior application security role at Coca-Cola HBC's Digital, Data & AI team in Cairo: the engineer leads threat modeling, secure design/code reviews, and security assessments across apps, APIs, and AI/LLM services (prompt injection, model poisoning, RAG/agent risks), embedding security into SDLC and MLOps pipelines. Core stack: Azure, Kubernetes, containers, IAM, and Python/JS/Java/C#.
- Compensation
- EGP 1.4M / yr
- Location
- Cairo, Egypt
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of experience in Information/Cyber Security and 2+ years in Software Development
- Strong Application Security background, including threat modeling, secure design/code reviews, and security testing
- Experience with OWASP Top 10, OWASP ASVS, and secure SDLC practices
- Understanding of AI/ML security, LLMs, Generative AI, RAG, AI Agents, and MLOps
- Knowledge of AI threats such as prompt injection, model poisoning, sensitive data exposure, and AI supply chain risks
- Experience performing security assessments of AI-powered applications, copilots, agents, or automation solutions
- Hands-on experience with Azure, Kubernetes, containers, and IAM
- Experience integrating SAST, DAST, SCA, Secrets Scanning, Container Security, and IaC Scanning into CI/CD
- Programming experience with Python, JavaScript, Java, and/or C#
- Familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF
- Cybersecurity/Application Security certification (CISSP, CSSLP, CEH, CASE, OWSA, or similar)
- Strong English communication and stakeholder management skills
Nice to have
- Familiarity with Microsoft Copilot Studio and Microsoft Foundry
- AI Security certification
Full description
We are seeking a Senior AI Application Security Engineer to help secure digital products, data platforms, analytics solutions, and AI-enabled services across our Digital, Data & AI landscape.
You will work closely with Product Managers, Architects, DevOps, Data & AI Engineers, and AI Engineers to embed secure-by-design and secure-by-default principles across software, data, and AI development lifecycles.
Key Responsibilities
-
Lead security initiatives across SDLC, DDLC, and AI/ML development lifecycles.
-
Conduct threat modeling, security requirements analysis, and secure design reviews.
-
Lead security architecture, code reviews, and technical security assessments.
-
Assess security risks across applications, APIs, cloud services, data platforms, and AI-enabled solutions.
-
Identify and mitigate AI/ML security risks, including prompt injection, model poisoning, sensitive data exposure, and insecure model deployment.
-
Support secure adoption of LLMs, Generative AI, RAG, AI Agents, and emerging AI technologies.
-
Drive software and AI supply chain security across CI/CD and MLOps pipelines.
-
Implement security controls across Azure, Kubernetes, containers, APIs, and cloud-native environments.
-
Develop reusable security standards, guardrails, and reference architectures.
-
Mentor engineering teams and promote secure-by-design practices.
Requirements
-
5+ years of experience in Information/Cyber Security and 2+ years in Software Development.
-
Strong Application Security background, including threat modeling, secure design/code reviews, and security testing.
-
Experience with OWASP Top 10, OWASP ASVS, and secure SDLC practices.
-
Understanding of AI/ML security, LLMs, Generative AI, RAG, AI Agents, and MLOps.
-
Knowledge of AI threats such as prompt injection, model poisoning, sensitive data exposure, and AI supply chain risks.
-
Experience performing security assessments of AI-powered applications, copilots, agents, or automation solutions.
-
Hands-on experience with Azure, Kubernetes, containers, and IAM.
-