Security Engineer – AI Detection & Response (Threat Intelligence)

Empowering Africa’s tomorrow, together…one story at a time.

Job Summary

To provide specialist advice & support in the development & implementation of IT security service delivery processes, methods and techniques enabling secure management & control of IT access, in alignment with governance requirements.

Job Description

The Security Engineer – with a focus in AI Security and AI Detection & Response (AIDR) is responsible for securing Absa's enterprise Artificial Intelligence (AI), Machine Learning (ML), Large Language Model (LLM), Agentic AI, Retrieval Augmented Generation (RAG), AI Gateway, and Model Context Protocol (MCP) environments.

The role combines Security Engineering practices, Security Architecture, Detection Engineering, Threat Hunting, Offensive Security, and Incident Response to protect AI systems from emerging cyber threats while enabling secure innovation across the organisation. It aims to enhance the banks capabilities in AI security controls, AI threat detection, AI red teaming, and AI platform security across cloud, hybrid, and on-premises environments.

Key Accountabilities

AI Security Architecture

• Design secure AI and ML architectures.
• Define AI security standards and reference architectures.
• Perform AI threat modeling exercises.
• Conduct security reviews of AI applications and platforms.
• Establish AI security controls across the AI lifecycle.
• Secure agentic AI systems and autonomous workflows.
• Assess security risks associated with AI adoption initiatives.

AI Detection & Response (AIDR)

• Develop AI-specific threat detection use cases.
• Create monitoring strategies for AI environments.
• Engineer detections within SIEM, XDR, and EDR platforms.
• Investigate AI-related security incidents.
• Develop AI incident response playbooks.
• Perform AI-focused threat hunting activities.
• Establish AI attack simulation and validation programs.

AI Infrastructure Security

Secure enterprise AI ecosystems including:

• Large Language Models (LLMs)
• Agentic AI Platforms
• AI Gateways
• AI Proxies
• MCP Servers
• MCP Clients
• AI Agents
• Vector Databases
• RAG Architectures
• Model Serving Platforms

Model Context Protocol (MCP) Security

Develop and implement security controls for MCP ecosystems.

Responsibilities include:

• MCP architecture security reviews
• Security assessment of MCP servers and connectors
• Validation of trust boundaries between agents and tools
• Security testing of MCP integrations
• Monitoring MCP activity and tool execution
• Designing secure MCP deployment patterns
• Developing MCP hardening standards

AI Gateway Security

Implement and manage security controls for enterprise AI gateways.

Responsibilities include:

• AI traffic inspection
• Prompt inspection and filtering
• Content moderation
• Data Loss Prevention (DLP)
• Access governance
• Rate limiting
• API protection
• Model routing controls.

 

Threat Intelligence, Threat Hunting & Research

• Monitor emerging AI threats
• Research adversarial machine learning attacks
• Track AI threat actor techniques
• Evaluate new AI security technologies
• Produce AI threat intelligence reports
• Support Threat Hunting activities through intelligence-led hypotheses, indicators, and analytical insights
• Collaborate with detection engineering and response teams to translate intelligence into actionable security controls and response strategies

Minimum Requirements:

AIDR Specific

• Bachelor's Degree (NQF 7) in Computer Science, Engineering (Electrical, Electronic, Mechanical), Mathematics, Physics, Information Security, or a related technology discipline.
• Minimum 1 year relevant experience in Cyber Security, Information Security, Security Engineering, Threat Intelligence, Threat Hunting, Detection Engineering, Incident Response, or related technology disciplines.
• Strong demonstratable knowledge of Artificial Intelligence (AI), Machine Learning (ML), Large Language Models (LLMs), Agentic AI, and Retrieval Augmented Generation (RAG) technologies and enterprise AI use cases.
• Strong demonstratable understanding of AI security principles, threats, and controls, including adversarial machine learning, prompt injection, model abuse, data protection, and secure AI deployment practices.
• Strong demonstratable understanding of enterprise AI platforms and architectures, including AI Gateways, AI Agents, Vector Databases, Model Context Protocol (MCP), and Model Serving Platforms.

Threat Intelligence and Threat Hunting Knowledge Requirements

• Foundational knowledge of Threat Intelligence principles, including threat actors, attack techniques, tactics, procedures (TTPs), indicators of compromise (IOCs), and cyber threat analysis.
• Understanding of Threat Hunting methodologies, including hypothesis-driven hunting, intelligence-led investigations, anomaly detection, and proactive identification of malicious activity.
• Knowledge of cyber security frameworks and adversary techniques such as MITRE ATT&CK, kill chain concepts, and attack simulation methodologies.
• Exposure to Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), or related security monitoring technologies.
• Understanding of security incident investigation, detection engineering, and the translation of threat intelligence into actionable detections and response activities.
• Ability to research emerging cyber threats, analyse intelligence sources, and communicate findings in a clear and actionable manner.

Education

Bachelor`s Degrees and Advanced Diplomas: Physical, Mathematical, Computer and Life Sciences (Required)

Absa Bank Limited is an equal opportunity, affirmative action employer. In compliance with the Employment Equity Act 55 of 1998, preference will be given to suitable candidates from designated groups whose appointments will contribute towards achievement of equitable demographic representation of our workforce profile and add to the diversity of the Bank.

Absa Bank Limited reserves the right not to make an appointment to the post as advertised