Senior Technical Consultant - Forward Deployed AI Security Engineer

AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.
 
At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD. 
 
We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived. 
 
We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD. 

What You Will Do: Perform AI runtime assessments. Inventory AI applications, models, agents, copilots, MCP servers, plugins, and data flows. Evaluate prompt/response paths, tool-calling behavior, identity chains, and attack surface. Produce scored findings covering prompt injection, jailbreaks, data leakage, model and agent misuse, shadow AI, and unsafe autonomous actions. Deploy and operationalize AI security tools. Stand up, integrate, and harden Palo Alto Prisma AIRS (runtime firewall, API intercept, model security, agent security, red teaming, posture), Koi Agentic Endpoint Security, Onyx Secure AI Control Plane / Guardian Agent, Zenity (observability, AISPM, exposure management, runtime boundaries), Zscaler AI Security (AI Guard, asset management, zero-trust access to GenAI), and CrowdStrike Falcon AIDR and related Falcon modules. Design the control plane. Map traffic through AI gateways, inline intercepts, endpoint agents, SaaS connectors, and identity providers. Define allow/block/human-in-the-loop policies for prompts, tool use, MCP calls, package and extension installs, and agent actions. Integrate with the existing stack. Wire AI security telemetry into SIEM/SOAR, EDR/XDR, SSE/Zero Trust, IAM, CSPM, and ticketing. Correlate AI events with endpoint, identity, and network signals so detections are actionable, not noisy. Red team and validate. Run adversarial testing against LLMs, agents, and copilots. Convert findings into enforceable guardrails. Re-test after deployment and prove residual risk is accepted or closed. Own customer outcomes. Embed with the account. Drive architecture workshops, implementation sprints, policy workshops, and knowledge transfer. Leave behind runbooks, detection content, and an operating model the customer can run without you. Communicate with precision. Write assessment reports, risk memos, architecture decision records, and board-ready summaries. Brief CISOs, AI platform owners, legal/privacy, and engineers in clear, idiomatic English. Escalate risk without inflating it. Feed product and practice. Return field patterns, integration gaps, and detection ideas to product, threat research, and delivery teams. Help standardize playbooks for repeatable AI security deployments.

Required Qualifications: Exceptional written and spoken English. You can write a 20-page technical assessment, a one-page CISO brief, and a customer email with equal clarity. Grammar, tone, structure, and technical precision are non-negotiable. Candidates will be evaluated on writing samples and live briefing quality. Hands-on deployment experience with multiple of the following platforms in production or customer environments: Palo Alto Prisma AIRS , Koi Agentic Endpoint Security , Onyx Security , Zenity , Zscaler AI Security , and CrowdStrike (Falcon AIDR, Falcon XDR/NG-SIEM, or adjacent Falcon modules used to secure AI runtime). Demonstrated ability to perform AI runtime assessments : discovering AI assets, inspecting prompt and tool-call traffic, identifying prompt injection / jailbreak / data-exfiltration / agent-abuse paths, and translat