At a Glance
Job Title – AI Security Engineer
Location: Kharadi, Pune, India.
Life Unlimited. At Smith+Nephew, we design and manufacture technology that takes the limits off living.
The AI Security Engineer is a hands-on individual contributor reporting to the AI Security Manager. The role is directly assigned to enterprise AI projects, embedding security into the design, build, and deployment of web applications, AI agents, and their integrations with enterprise data and systems. Working closely with development and platform teams, the AI Security Engineer applies Microsoft security capabilities and AI security best practice to identify risks, define practical security requirements, and confirm the right controls are in place before and after release.
What will you be doing?
• Serve as the dedicated security engineer on assigned enterprise AI projects, supporting delivery teams from design through deployment and ongoing operation.
• Perform threat modelling and security design reviews for web applications, AI agents, copilots, and their integrations with enterprise data and systems.
• Define and validate security requirements for AI solutions built on Microsoft platforms, including Azure, Microsoft Foundry, Copilot Studio, Microsoft 365 Copilot, and Power Platform.
• Review proposed AI tools and solution architectures against the approved tool list and the enterprise architecture capability map, and advise on approval status.
• Identify and help mitigate AI-specific and agentic AI risks such as prompt injection, data leakage, insecure tool and plugin use, MCP and tool integration risks, and excessive agent permissions, aligned with frameworks such as OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and NIST AI RMF.
• Guide implementation of identity, access, and data protection controls, including Microsoft Entra ID, managed identities, Azure Key Vault, Microsoft Purview, and network isolation.
• Define and validate agent identity and permission models, ensuring each AI agent uses least-privilege access to tools and data.
• Guide implementation of AI runtime protections such as an AI gateway or Azure API Management, Prompt Shields, and Azure AI Content Safety.
• Support secure development practices through code and configuration reviews, security testing, and tracking remediation of findings with development teams.
• Coordinate penetration testing for AI applications, including scoping, managing external testers, and tracking findings to closure.
• Use Microsoft security tooling such as Microsoft Defender for Cloud and Microsoft Sentinel to help monitor AI workloads and support investigation of AI-related security issues.
• Own and maintain AI incident response runbooks, and support incident handling for AI-related security events.
• Document security assessments, risks, and residual risk decisions, and escalate significant issues to the AI Security Manager.
• Contribute to AI security standards, reusable secure design patterns, and guidance, and share best practice with project teams.
What will you need to be successful?
You. Unlimited.
We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve.
Inclusion + Belonging - Committed to Welcoming, Celebrating and Thriving. Learn more about our Employee Inclusion Groups on our website https://www.smith-nephew.com/
Other reasons why you will love it here!
#L1-YS1
Stay connected by joining our Talent Community.
We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day.
Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N.
Explore our website and learn more about our mission, our team, and the opportunities we offer.
Source: Smith+Nephew careers · View original posting
Smith & Nephew is a medical device company specializing in the repair, regeneration, and replacement of soft and hard tissue. With a presence in over 35 countries, the company offers a diverse range of products in orthopaedics, endoscopy, advanced wound management, and rehabilitation. Founded in 1856 in Hull, UK, Smith & Nephew initially focused on pharmaceuticals before shifting to bandages and surgical dressings. The company has grown significantly over the years, particularly during the World Wars, and has expanded its product offerings through various acquisitions. Its portfolio includes advanced wound management products, orthopaedic devices, arthroscopy equipment, and first aid kits. Smith & Nephew values care, courage, and collaboration in its corporate culture.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“The philosophy centers on 'DevSecOps' and 'Developer Enablement,' with a focus on fostering a culture of 'collaboration, engagement, and continuous learning.' The mission is to 'define and ensure implementation of cybersecurity requirements and controls' while driving initiatives that 'enhance the productivity, efficiency and quality of the software team.' Risk is managed through a formal 'enterprise risk management framework.'”
Security Team
The AppSec function at Smith+Nephew appears to be integrated within 'Product Security.' Key leaders include Ashley Woyak Bellus (Product Security Director) and Sahil Bhirud (Product Security). While a specific reporting line to the CISO or CTO is not publicly stated, the company is actively hiring for Product Security Engineers to 'define and ensure implementation of cybersecurity requirements.' As of April 2026, there is at least one active posting for a Product Security Engineer. Total team size is not publicly available.
Key Initiatives
Active initiatives include the adoption of DevSecOps, automation of test coverage, and formal 'Vulnerability Management.' The company follows a Secure SDLC that incorporates design control requirements such as IEC 62304 and ISO 14971. There is no public evidence of a formal 'Security Champions' program or specific recent tool rollouts in the last six months.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Smith+Nephew's site