AI Security Consultant

Salary: £52,000 - 92,000 per year

Requirements:

• Strong background in cyber security consulting, security architecture, risk management, or security operations.
• Good understanding of security domains including identity and access management, cloud and application security, data protection, vulnerability management, incident response, and security monitoring.
• Ability to assess technical environments and produce clear, prioritised recommendations.
• Experience engaging with technical teams and senior business stakeholders.
• Understanding of AI, generative AI, or LLM-enabled systems, including how they interact with data, prompts, APIs, tools, and users.
• Awareness of AI security risks, including prompt injection, sensitive information disclosure, excessive agency, insecure output handling, model or data poisoning, vector or embedding weaknesses, and AI supply chain risk.
• Ability to perform threat modelling for complex systems, including AI-assisted or agentic workflows.
• Strong written and verbal communication skills, with the ability to explain emerging technical risks in practical terms.
• Desirable: experience with AI governance, responsible AI, model risk management, or AI assurance.
• Desirable: familiarity with frameworks and guidance such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Agentic AI guidance, MITRE ATLAS, ISO 27001, NIST CSF, CIS Controls, or cloud security frameworks.
• Desirable: experience with SOC operations, SIEM/SOAR platforms, detection engineering, threat intelligence, or incident response.
• Desirable: knowledge of AI-enabled development platforms, agent frameworks, retrieval-augmented generation, model APIs, vector databases, or automation and orchestration tools.
• Desirable: experience designing guardrails for autonomous systems, including least privilege, approval workflows, action limits, logging, monitoring, and rollback mechanisms.
• Desirable: relevant certifications such as CISSP, CISM, CCSP, GIAC, ISO 27001 Lead Implementer/Auditor, cloud security certifications, or AI/security-focused training.
• Some UK roles require security clearance. All PA people must undergo background checks and achieve the Baseline Personnel Security Standard; roles requiring higher National Security Vetting require at least five years of continuous UK residency. Applicants for those roles must meet the stated residency prerequisite (British citizenship or residence in the UK for the past five years).

Responsibilities:

• Conduct cyber security assessments across technology estates, cloud environments, applications, networks, identity platforms, and operational processes.
• Review security architectures and provide pragmatic recommendations aligned to business risk.
• Support the design and implementation of security controls, including access management, data protection, logging and monitoring, vulnerability management, incident response, and third-party risk.
• Help clients interpret security requirements, assess control maturity, and develop actionable improvement roadmaps.
• Translate technical findings into clear, business-relevant advice for senior stakeholders.
• Assess risks associated with AI-enabled applications, LLM integrations, AI agents, autonomous workflows, and model-connected business processes.
• Review AI system designs for risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure, and weak human oversight.
• Threat model agentic systems, including how agents access tools, call APIs, retrieve data, make decisions, and trigger actions.
• Advise on secure AI application development patterns, including permission boundaries, identity controls, sandboxing, auditability, input and output validation, and human-in-the-loop controls.
• Help clients establish AI governance and assurance processes across the lifecycle, from experimentation through production deployment.
• Identify ways to use AI safely to improve cyber security operations, including alert triage, threat intelligence enrichment, incident summarisation, detection engineering, reporting, vulnerability prioritisation, and control testing.
• Support the evaluation and adoption of AI-enabled security tools, ensuring appropriate security, privacy, governance, and operational safeguards.
• Help security teams design workflows in which AI augments analysts without unacceptable risk, over-reliance, or loss of accountability.
• Develop practical playbooks, guardrails, and operating models for responsible AI use in SOC, GRC, vulnerability management, and incident response functions.
• Help clients measure the effectiveness, limitations, and risks of AI-assisted security processes.

Technologies:

• Agentic AI
• AI
• AI Agents
• Cloud
• Support
• LLM
• OWASP
• Security

More:

We are PA Consulting, a global firm of more than 4,000 strategists, innovators, designers, consultants, digital experts, scientists, engineers, and technologists. We work across sectors including consumer and manufacturing, defence and security, energy and utilities, financial services, government and public services, health and life sciences, and transport, with offices across the UK, Ireland, the US, the Nordics, and the Netherlands. We are seeking an AI Security Consultant to advise clients on cyber security risks and help secure AI-enabled applications, LLM integrations, and agentic systems. You will work with product, design, and multidisciplinary teams in our Digital & Data community, with opportunities to develop on a technical career path. Our hybrid approach involves working in an office or on a client site at least two days per week. We offer varied client projects, peer support, coaching and mentoring, and learning and certification budgets. Our benefits include private healthcare, 25 days of annual leave plus a half day on Christmas Eve, the option to buy five additional days, a company pension scheme, an annual performance-based bonus, PA share ownership, tax-efficient benefits, and opportunities to take part in community and charity initiatives. We provide an inclusive workplace and support adjustments or accommodations during recruitment. The assessment process may include a recruiter call, two competency or technical interviews, and a final meeting with a PA leader involving a mini case study and discussion.

last updated 40 week of 2026