AO "Grinatom" is a system integrator with over 10 years of experience in the Russian market. We develop software for the digitalization of the nuclear industry, and also support the functions of enterprises of Rosatom State Corporation in the areas of project office and IT support, accounting and tax accounting, and human resource management.
Our team is looking for an AI Services Architect for Information Security
What tasks will need to be solved:
- Participation in the design of artificial intelligence information systems in terms of forming and enforcing information security requirements;
- Design of interaction with information security systems (IAM/IDM/PAM/DLP/SIEM, etc.);
- Writing and updating design and operational documents for IS;
- Participation in the development and approval of internal regulatory documents (LRAs) in the field of IB;
- Participation in the development of special tools and methods for ensuring the security of artificial intelligence system elements (protection against adversarial attacks, model integrity control, protection against prompt injection, data leaks, etc.);
- Support of the secure development process (architecture analysis, vulnerability analysis, assistance in making architectural decisions);
- Performing tasks to ensure information protection (vulnerability scanning, update control, resource inventory, control of operational readiness of security tools, etc.);
- Analysis of IB events;
- Participation in IB incident investigation;
- Participation in the selection of the technology stack, prototyping new AI solutions for IB tasks and evaluating their applicability in the product;
- Close interaction with Data Scientists, data engineers, developers, and cybersecurity experts to translate research developments into industrial services.
Our expectations from the candidate:
- Understanding of machine learning processes in general, MLOps, MLSecOps;
- Understanding of secure development principles, DevSecOps, AppSec;
- Knowledge of FSTEC documents and GOST standards in the field of IB - 21, 117, 239, threat modeling methodology, GOST 56939-2024, etc.;
- Understanding of the AI threat modeling principle (FSTEC, MITRE ATLAS, OWASP Top 10 X, etc.);
- Understanding of AI system security principles: protection against data poisoning, model inversion, adversarial examples, control of access to models and data;
- Ability to make balanced architectural decisions and effectively communicate with development, Data Science, and IB teams;
- Experience in integrating and designing interaction with IAM/IDM/PAM/DLP/SIEM systems;
- Experience in writing and updating design and operational documentation for information systems in accordance with FSTEC and GOST requirements;
- Experience in developing and approving local regulatory acts (LRAs) in the field of information security;
- Experience in performing technical measures for information protection: vulnerability scanning, update management, asset inventory, control of operational readiness of security tools.
It will be a plus:
- Experience in analyzing IB events using SIEM systems and configuring correlation rules;
- Experience in investigating information security incidents, including log analysis;
- Practical experience in developing and implementing special tools for protecting AI systems: adversarial example filtering, prompt injection detector, data leak control;
- Experience in designing services based on container architecture (Kubernetes, Docker);
- Experience working with relational and specialized storage systems: PostgreSQL, Elasticsearch, vector databases;
- Experience in administering Linux systems.
What we offer:
- Employment in accordance with the Labor Code of the Russian Federation
- Five-day work week, Saturday and Sunday are days off.
- Work schedule from 9:00 to 18:00. Hybrid work format.
- Guaranteed "white" salary. Every year the salary is reviewed: the base salary is indexed + based on the results of personnel assessment procedures.
- Voluntary Medical Insurance (DMS): the opportunity to use medical services of private clinics in the city for free, including dental care. The opportunity to purchase a medical insurance policy for family members at a corporate discount.
- We pay for the rest of employees' children in summer health camps (90% of the cost) and for employees themselves in sanatoriums and rest houses (from 20 to 100% of the cost).
- Gifts for employees' children for New Year, for first-graders for September 1st.
