A

Amgen

Makes biotech medicines for serious illnesses

AI Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeLisbon, Portugal€52.3k - €70.8k

About the Job

Requirements

  • Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, Information Technology, or a related technical field, or equivalent practical experience.
  • 5+ years of hands-on experience in cybersecurity, security engineering, application security, cloud security, or a related technical discipline, including experience securing modern cloud-based applications and platforms.
  • Strong programming or scripting skills to build security tooling, automation, integrations, and proof-of-concept implementations.
  • Strong understanding of application security fundamentals, including authentication and authorization, API security, secrets management, cryptography, input/output validation, software supply chain security, and common application vulnerabilities.
  • Hands-on experience with cloud-native technologies, preferably AWS.
  • Practical knowledge of threat modeling and security testing, and the ability to translate identified risks into technical mitigations and security controls.
  • Understanding of AI/ML systems and the AI development lifecycle, including model training, inference, APIs, data pipelines, and MLOps/LLMOps.
  • Familiarity with security risks associated with large language models and generative AI, including prompt injection, sensitive information disclosure, insecure output handling, excessive agency, model and data supply chain risks, and insecure tool integrations.
  • Familiarity with AI agents, RAG architectures, vector databases, embeddings, model APIs, and AI application frameworks.
  • Experience designing, developing, and automating agentic AI workflows and pipelines, including multi-step and tool-enabled agent architectures, using platforms and frameworks such as n8n, Databricks Agent Bricks, Amazon Bedrock Agents, or similar technologies.
  • Ability to manage competing demands, adapt quickly to changing priorities, and maintain high-quality outcomes under time pressure in a fast-paced and rapidly evolving AI environment.
  • Familiarity with AI-focused security frameworks and guidance such as OWASP guidance for LLM and GenAI applications, MITRE ATLAS, and the NIST AI Risk Management Framework.
  • Fluency in English.

Responsibilities

  • Design and implement AI security controls for AI/ML applications, platforms, models, APIs, agents, and supporting infrastructure.
  • Deploy security tooling and automation, primarily using AWS cloud infrastructure and APIs, to integrate AI security testing and controls into engineering workflows.
  • Integrate security into MLOps, LLMOps, DevSecOps, and CI/CD pipelines to enable automated security validation throughout the AI development lifecycle.
  • Threat model AI systems and applications, translating identified risks into practical engineering requirements, mitigations, tests, and security controls.
  • Secure generative AI and agentic AI systems, including model endpoints, retrieval-augmented generation (RAG), vector databases, tools, agent workflows, identity boundaries, and external integrations.
  • Evaluate and integrate AI security technologies, including capabilities for AI runtime protection, model and application testing, data protection, observability, and AI security posture management.
  • Implement security controls for cloud-based AI platforms and services across enterprise cloud environments.
  • Secure containerized AI workloads running on technologies such as Docker and Kubernetes, including workload identity, secrets management, network controls, runtime security, and policy enforcement.
  • Implement infrastructure and security controls as code using technologies such as Terraform, cloud-native infrastructure-as-code tooling, or similar technologies.
  • Partner with AI and platform engineering teams to investigate threats, develop mitigations, and drive identified security issues through remediation.
  • Support security reviews of AI systems and provide actionable engineering recommendations and practical solutions.
  • Deploy monitoring and detection capabilities for security-relevant AI activity, misuse patterns, anomalous behavior, and emerging attack techniques.
  • Build AI security standards and technical guidance, translating security, regulatory, and risk requirements into implementable technical controls.
  • Share technical knowledge across cybersecurity and engineering teams and contribute to the continued development of Amgen’s AI security capabilities.
  • Travel domestically and internationally up to 10%.

Desired Qualifications

  • Experience with AI/ML development frameworks such as PyTorch, TensorFlow, Hugging Face, LangChain, or similar technologies.
  • Experience with MLOps and AI platforms such as MLflow, SageMaker, or equivalent platforms.
  • Understanding of data protection techniques, including encryption, data classification, DLP, anonymization, tokenization, and privacy-enhancing technologies.
  • Familiarity with regulated environments and requirements such as GxP, GDPR, the EU AI Act, and HIPAA.
  • Ability to communicate complex AI security issues clearly and translate them into practical engineering actions.
  • Relevant security certifications such as CISSP, CCSP, cloud security certifications, or AI security certifications.

About the Company

Amgen

Makes biotech medicines for serious illnesses

Amgen develops and makes biologic medicines, which are drugs built from proteins and antibodies grown in living cells, for serious conditions such as heart disease, cancer, and bone loss. Its anemia drug Epogen, approved in 1989, became one of the biotechnology industry's first blockbuster medicines. Amgen grows these drugs in large tanks called bioreactors, and its products include the cholesterol drug Repatha, the bone-building drug Evenity, and the severe asthma drug Tezspire. It earns money by selling these medicines, mostly through large drug wholesalers that supply hospitals and pharmacies. Amgen was founded in 1980 and is based in Thousand Oaks, California.

Company size
10,001+
Company stage
IPO
Headquarters
Thousand Oaks, CA
Founded
1980

Recently Posted Jobs

Explore more opportunities at Amgen

See more jobs