The Security Engineer will join Brunswick's Information Security team and play a key role in supporting the firm's secure adoption of AI and emerging technologies.
🏢 About Brunswick
Brunswick is a global advisory firm. We help companies tackle high-stakes issues, navigate complex stakeholder relationships, and deliver high-impact outcomes. Our clients value our ability to anticipate, shape, and respond to the key players and forces in the financial and investment arena, regulatory and geopolitical universe, NGO community, workforce and beyond. They rely on us for deep experience, fresh perspectives and original thinking. So, in Brunswick you will find an exceptional range of experience and talent with a rich mix of backgrounds. From the beginning, we have prioritized attracting, developing, and retaining the best professionals in the industry, united by a culture of inclusivity, excellence, and intellectual curiosity. Founded in 1987 in London, the firm has organically grown to 27 offices in 18 countries across the Americas, Europe, Middle East, Africa, Asia and Australia. We operate as a “one-firm firm” with no individual profit centers. This allows us to assemble fully integrated, bespoke teams for each client, able to draw on the full resources of Brunswick anywhere in the world. Brunswick is an equal opportunity employer.
🎯 The Role
Key responsibilities include:
✅ Key Responsibilities
Review and assess third-party AI tools, enterprise AI platforms, and new AI-enabled features, including solutions such as ChatGPT, Claude, Microsoft Copilot, and other emerging technologies.
Support the implementation of security guardrails, governance processes, and secure design patterns for AI adoption across the firm.
Conduct STRIDE-based threat modelling for new internally developed solutions, AI-enabled workflows, integrations, and automation use cases.
Assess risks associated with AI use cases, including data exposure, prompt injection, model misuse, third-party dependency risk, inappropriate access to sensitive information, and insecure integrations.
Advise on secure design principles, including identity and access management, data protection, logging, monitoring, encryption, resilience, and secure configuration.
Define and document security requirements, architecture decisions, design recommendations, and risk-based remediation actions.
Monitor emerging AI security risks, attacker techniques, and industry best practices, ensuring relevant mitigations are considered within Brunswick's environment.
📌 Required Qualifications
5-7 years' experience in cyber security, information security, security engineering, or a related technical security role.
Strong understanding of security architecture and secure design principles, including identity and access management, data protection, logging, monitoring, encryption, network security, and resilience.
Familiarity with AI-related technologies, enterprise AI platforms, large language models, agentic AI, and the security risks associated with AI adoption.
Practical understanding of cloud and enterprise environments, particularly Microsoft 365, Azure, SaaS platforms, and modern workplace technologies.
Ability to translate technical security risks into clear, business-focused recommendations.
Strong written and verbal communication skills, with confidence engaging technical and non-technical stakeholders.
Sound judgement, attention to detail, and the ability to balance security requirements with business needs.
Experience working in an ISO27001-aligned or regulated environment would be beneficial.
⭐ Desirable Experience
Preferred, but not essential, certifications:
ISC2: CISSP, CCSP, SSCP
ISACA: CISM, CISA, CRISC
CompTIA: Security+, CySA+, CASP+
🎁 Benefits
Whether you are joining a client facing team, a core services team, or starting out on your professional career journey, joining Brunswick unlocks a range of employee benefits to support your financial future, health and wellness, family and community and continuous professional development.
Please let Brunswick Group know that you found this role at devopsprojectshq.com as a way to support us, so we can keep providing you with awesome DevOps jobs.
Never miss a job
Join 2,000+ DevOps developers getting weekly alerts for remote and US/EU roles, Kubernetes, AWS, Terraform, filtered for your stack.
🔒 Need an IP to whitelist?
Get a dedicated static EU outbound IP for Banks, payments, EHRs, APIs, AI.