Senior Cloud & AI Security Engineer

Senior Cloud & AI Security Engineer

• Enthusiastic about securing cloud platforms and AI-driven solutions in a rapidly evolving technology landscape?
• Do you enjoy designing security frameworks, enabling secure development practices, and partnering with engineering teams to build resilient, scalable, and compliant cloud and AI environments?

About the team:

LexisNexis Intellectual Property Solutions (LNIP) is the global leader in patent intelligence, bringing clarity to innovation for businesses, law firms, universities, and government agencies worldwide. Our mission is to help the innovation community make better decisions faster, with greater confidence, combining the world’s most trusted patent data with sophisticated analytics, AI-powered insights, and purpose-built workflows.

Protégé in PatentSight is LNIP’s next-generation agentic AI assistant, purpose-built for strategic patent analysis. Protégé replaces complex filter-based workflows with natural language questions, surfacing structured, decision-ready insights grounded in trusted data and established metrics.

About the role:

We are seeking a Senior Cloud & AI Security Enablement Engineer to provide hands-on cloud security engineering capability while also enabling the secure and effective use of AI across Information Security and product engineering teams.

This role sits between Security Architecture, BISO/Application Security, Cloud/Platform Engineering, and GRC. It is designed to reduce manual workload on Security Architecture and BISO/Application Security by turning recurring security requirements into reusable cloud guardrails, automated controls, AI-assisted workflows, secure design patterns, and developer-facing enablement materials.

The successful candidate will be a practical builder and security partner who can operate cloud security controls, support secure AI adoption, and use AI to improve the speed and consistency of security delivery.

Key Responsibilities:

Cloud Security Engineering

• •Build and maintain reusable cloud security guardrails for identity, logging, encryption, network segmentation, secrets management, storage, workloads, containers, serverless services, and data protection.
• •Translate security architecture standards into deployable cloud patterns, reference implementations, templates, and engineering-ready requirements.
• •Partner with cloud, platform, DevOps, and product engineering teams to embed security controls into cloud landing zones, CI/CD pipelines, infrastructure-as-code workflows, and operational processes.
• •Support the implementation and tuning of CSPM, CNAPP, cloud workload protection, IaC scanning, secrets scanning, and related cloud security tooling.
• •Develop policy-as-code and control-as-code mechanisms to prevent, detect, and report common cloud misconfigurations.
• •Support cloud-native vulnerability and misconfiguration remediation by providing prioritization logic, remediation guidance, and reusable fix patterns.
• •Establish cloud security metrics and dashboards covering control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns.

AI Security Enablement

• •Design and maintain AI-assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation.
• •Build prompt libraries, review rubrics, validation steps, and human-in-the-loop processes for approved AI use within Information Security.
• •Identify repetitive BISO, AppSec, and Security Architecture tasks that can be safely accelerated through AI-assisted processes.
• •Partner with GRC, Legal, Privacy, and security leadership to ensure AI-assisted security workflows are auditable, explainable, and aligned with internal risk expectations.
• •Measure the effectiveness of AI-assisted workflows, including time saved, consistency improvements, review quality, and reduction in repeat manual work.

Secure AI Application and Cloud-AI Guardrails

• •Define secure design patterns for AI-enabled applications, including LLM-based features, retrieval-augmented generation, AI agents, AI APIs, copilots, and automation workflows.
• •Establish cloud security requirements for AI workloads, including identity, secrets, data storage, network access, observability, workload isolation, and third-party AI service integrations in partnership with Sec Architecture & AppSec.
• •Support AI application threat modelling and risk reviews in partnership with BISO/AppSec.
• •Create developer-facing guidance for safe use of AI coding assistants, AI APIs, data ingestion, vector stores, model outputs, and AI-generated code in partnership with BISO/AppSec.

Security Enablement and Workload Reduction

• •Convert recurring BISO/AppSec and Security Architecture questions into reusable guidance, decision trees, approved patterns, checklists, and self-service workflows.
• •Build lightweight intake and routing mechanisms that help determine when a request needs BISO review, AppSec review, architecture review, GRC input, or engineering remediation.
• •Create and maintain a library of approved cloud and AI security patterns that product and engineering teams can reuse.
• •Help reduce one-off security consultations by embedding approved security decisions into tooling, templates, and standard delivery workflows.

Requirements:

Essential -

• •Experience in machine learning engineering. Strong experience in cloud security engineering, application security, security architecture, DevSecOps, or security automation.
• •Hands-on experience with at least one major cloud platform such as AWS or Azure.
• •Practical knowledge of IAM, logging, encryption, secrets management, network security, storage security, vulnerability management, and secure CI/CD.
• •Experience with infrastructure-as-code and cloud security tooling such as CSPM, CNAPP, IaC scanning, SAST, SCA, secrets scanning, or policy-as-code.
• •Ability to translate security standards and architecture requirements into practical implementation patterns.
• •Familiarity with generative AI, LLM-enabled applications, AI-assisted development, or AI security risks.
• •Strong scripting, automation, workflow design, or tooling integration experience.
• •Excellent written and verbal communication skills, with the ability to create clear security guidance for engineering teams.

Desirable-

• •Experience building cloud security guardrails, landing zone controls, reusable modules, or automated remediation workflows.
• •Experience supporting regulated environments or environments with strict customer, contractual, or compliance obligations.
• •Familiarity with AI security frameworks and guidance such as the NIST AI Risk Management Framework, NIST Generative AI Profile, OWASP Top 10 for LLM Applications, or Cloud Security Alliance AI security guidance.
• •Experience with RAG architecture, AI agents, vector databases, AI APIs, prompt engineering, or AI application threat modelling.
• •Experience building security knowledge assistants, prompt libraries, AI-assisted review workflows, or security automation.

Why Join Us?

Join our team and contribute to a culture of innovation, collaboration, and excellence. If you are ready to advance your career and make a significant impact, we encourage you to apply.

Work in a way that works for you

We promote a healthy work/life balance across the organization. We offer an appealing working prospect for our people. With numerous wellbeing initiatives, shared parental leave, study assistance and sabbaticals, we will help you meet your immediate responsibilities and your long-term goals.

Working flexible hours - flexing the times when you work in the day to help you fit everything in and work when you are the most productive.

Working for you

We know that your well-being and happiness are key to a long and successful career. These are some of the benefits we are delighted to offer:

Generous holiday allowance with the option to buy