MDR - AI Security - Prisma Airs - ACON

KPMG Global ServicesNoida, Uttar PradeshOn-siteFull-timeMid level, 2–5 yearsListed 1 hour ago

Apply now

About this role

We are looking for a of AI Prisma Air resource with 2 to 6 years of experience for one of our engagements. The resource must work from our Noida office and willing to work on shifts

Educational qualifications
• Bachelor’s degree in Computer Science, Information Technology, Information Security, Artificial Intelligence, Data Science, Engineering, or a related discipline.​ • Postgraduate qualification in AI, Cybersecurity, Cloud Computing, or Information Systems is preferred.​ • Equivalent relevant experience in enterprise AI or cybersecurity may be considered.​
Work experience

• 2–6 years of experience in cybersecurity, cloud security, application security, AI/ML security, or related technology roles. ​ • Practical exposure to enterprise AI applications, generative AI services, LLM-enabled applications, AI agents, APIs, and supporting cloud environments. ​ • Experience discovering and inventorying sanctioned and unsanctioned AI applications, models, agents, data flows, and associated business owners. ​ • Experience identifying Shadow AI usage and supporting risk assessment, governance, policy enforcement, and remediation tracking. ​ • Hands-on exposure to inline or API-based protection for AI applications, including inspection of prompts, responses, content, URLs, and sensitive-data movement. ​ • Experience supporting AI application security assessments, automated scans, vulnerability reviews, or red-team exercises against AI applications and agents. ​ • Ability to analyse findings such as prompt injection, sensitive-data leakage, unsafe content, insecure model or API usage, and excessive agent permissions. ​ • Experience documenting findings, creating tickets, tracking remediation, and reporting progress against agreed SLAs and KPIs. ​ • Familiarity with Prisma AIRS or comparable AI security, cloud security, API security, DLP, CASB, CSPM, or CNAPP platforms is preferred. ​
The ideal candidate will:
• • Understand the enterprise AI lifecycle, from discovery and inventory through development, deployment, runtime protection, monitoring, and governance. ​ • Support Prisma AIRS onboarding and day-to-day operations across AI Inventory, AI Runtime Security, AI Red Teaming, AI Supply Chain Security, and related capabilities. ​ • Discover AI applications and Shadow AI usage, validate ownership and business purpose, classify risk, and maintain an accurate enterprise AI inventory. ​ • Configure or support inline, API-based, and policy-driven safeguards for AI applications without creating unnecessary disruption to business workflows. ​ • Execute or support AI security scans and red-team assessments, review results, validate findings, and coordinate remediation with application, cloud, SOC, and governance teams. ​ • Apply working knowledge of LLM and agentic-AI risks, including prompt injection, data leakage, insecure output handling, malicious content, model or supply-chain risk, and excessive agency. ​ • Prepare clear SOPs, runbooks, assessment reports, dashboards, and stakeholder updates. ​ • Work independently, manage multiple priorities, communicate clearly, and escalate risks in a timely manner. ​

Mandatory Certification Required:

(At least one required; multiple strongly preferred)
• AI certification – must have at least one recognized AI or generative-AI certification, such as Microsoft Azure AI Fundamentals (AI-900), AWS Certified AI Practitioner, Google Cloud Generative AI Leader, or an equivalent credential. ​ • Cloud certification – must have at least one AWS, Microsoft Azure, or Google Cloud certification at foundational or associate level. ​ • Palo Alto Networks certification – good to have; Prisma AIRS, Prisma Cloud, or relevant Palo Alto Networks product training/certification is preferred. ​ • Additional certifications such as Security+, CEH, CCSP, or CISSP are advantageous but not mandatory. ​
Technical Skills Required:

Enterprise AI Discovery & Governance: ​
• Understanding of enterprise AI, generative AI, LLMs, AI agents, copilots, model endpoints, plugins/tools, and common AI application architectures. ​ • Ability to identify, inventory, classify, and maintain records of AI applications, models, agents, datasets, owners, integrations, and business use cases. ​ • Knowledge of Shadow AI discovery, risk triage, acceptable-use controls, governance workflows, exception handling, and remediation tracking. ​

AI Application & Runtime Security: ​
• Working knowledge of Prisma AIRS concepts including AI Inventory, AI Runtime Security, AI Red Teaming, AI Supply Chain Security, AI Gateway, and AI security posture management. ​ • Understanding of inline, network-intercept, API-intercept, and gateway-based protection patterns for AI applications. ​ • Ability to review prompts, responses, sessions, violations, policies, and security findings related to prompt injection, sensitive-data leakage, malicious URLs/content, unsafe responses, and adversarial manipulation. ​

AI Security Testing & Engineering: ​
• Exposure to AI application scanning, automated red teaming, adversarial testing, model/artifact scanning, and validation of findings. ​ • Familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF, secure API practices, threat modelling, and vulnerability management. ​ • Basic knowledge of Python, REST APIs, JSON, authentication, logging, and integration troubleshooting; familiarity with AI/ML frameworks is desirable. ​

Cloud, Operations & Team Skills (Good to have skill): ​
• Working knowledge of AWS, Microsoft Azure, or Google Cloud security services, IAM, networking, logging, encryption, and secrets management. ​ • Experience with SIEM, SOAR, ITSM, DLP, CASB, CSPM/CNAPP, API security, or DevSecOps tooling is preferred. ​ • Strong analytical, documentation, communication, stakeholder-management, ownership, and collaborative problem-solving skills. ​

Behavioral / team skills
• Strong communication and stakeholder management skills, including ability to explain complex security concepts in simple terms. • Analytical mindset with strong problem‑solving and decision‑making skills. • High level of ownership, accountability, and attention to detail. • Ability to handle multiple priorities in fast‑paced cloud and security environments. • Collaborative mindset with a willingness to mentor junior team members. • Proactive, structured, and self-driven approach to work. • Strong documentation and presentation abilities.