LLM SecOps Specialist

Your responsibilities will include:

• Participation in DevSecOps processes of the AI platform: secure CI/CD, artifact scanning (prompt, AI-pipeline, tool).
• Integration of security controls into the AI platform infrastructure (inference, RAG, AI agents).
• Participate in the development and implementation of LLM security metrics, hallucination controls, and model response quality.
• Implement and configure guardrails (input/output): PII and confidential data control, protection against Prompt Injection, Jailbreak, NSFW and toxic content, ensuring security in RAG scenarios (poisoning, vector DB control, retrieval, indexing).
• Integrate AI Sec-controlling with the bank's infrastructure: SIEM, DLP, artifact versioning systems, scanning LLM models and source code for malicious or unwanted behavior (prompt/response logging, AI agent/RAG tracing, anomalous behavior, attack attempts, data leaks).
• Participate in LLM platform security incident management: incident analysis, post-mortems, improvement of controls and response playbooks.
• Participate in building secure LLM testing processes.
• Building protection for the model supply chain (tool, agent execution).
• Implement access control to LLM and data (RBAC/ABAC for models, tools, isolation of user contexts).

What we expect:

• Experience in information security (3+ years), DevSecOps, AppSec.
• Understanding of modern AI/LLM system architecture: RAG, vector databases, agent frameworks, LLM specifics regarding threats.
• Practical experience with tools and practices:
  • CI/CD, security-scan, SAST/DAST, secret-scan.
  • Logging and monitoring systems, SIEM/SOAR at the integration level.
  • RBAC/ABAC approaches, OAuth/OpenID, service accounts.
• Understanding of vulnerabilities from OWASP Top 10 for LLM.
• Skills in architecture analysis and technical documentation writing: threat models, service interaction diagrams, regulations, and playbooks.
• Proficiency in Python for writing automation scripts for testing and analysis.
• Willingness to learn new AI tools, LLM frameworks, and participate in the development of internal AI Sec standards and methodologies.

Will be a plus:

• Experience in designing or operating LLM platforms, RAG services, chatbots, or agent systems.
• Experience implementing guardrails and AI Security solutions.
• Experience integrating security controls with DLP/SIEM, building correlation rules and dashboards for AI scenarios.
• Experience working in a large bank, fintech, or other highly regulated industry.

What awaits you

• A high-tech and spacious office (Baltiyskaya or Voykovskaya metro station).
• BestBenefits – save on travel, electronics, sports, and other useful things.
• Telemedicine, Voluntary Medical Insurance or substitution for fitness, as well as healthy lifestyle communities, cycling, and running – we support a healthy lifestyle.
• Flexible start and end of the workday by agreement.
• OTP Coins – collect and spend on anything: from a raincoat to a day-off.
• IT Academy – improve your soft and hard skills, participate in conferences.
• Welcome pack: stylish and useful merchandise.
• Casual dress code: we love hoodies and comfortable jeans.
• Preferential terms on loans and deposits for employees: you can buy something with a good deal.