Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 15 days ago

AI Security SME

Malomatia40 open roles

Where
Doha, Qatar
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAI Security SMEMalomatia · Doha, Qatar

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Malomatia's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.7% of postings close within 7 days. Measured by our own scanner across the market. Malomatia postings stay open a median of 22 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.8%3 days
  3. 13.7%7 days
  4. 22.1%14 days
  5. 37.6%30 days
  6. 59.1%60 days
This job: posted 15 days ago

Malomatia median: 22 days open

The posting

Job Description

You will lead the security architecture, governance, and assurance of our AI and GenAI platforms across the organization. This includes classical ML systems and modern LLM/agentic architectures. You will define how models are designed, deployed, monitored, and defended; ensure they are robust, explainable, privacy-preserving, and compliant; and act as the go-to expert for AI security across products, data, cloud, and security teams.

Responsibilities

  • AI Security ArchitectureDesign and review secure architectures for ML/LLM workloads (training, fine tuning, inference, RAG, agents, plugins, tool calling, APIs). Define reference architectures for on-prem, hybrid, and cloud AI platforms (Azure OpenAI, AWS Bedrock, GCP Vertex, self-hosted models, etc.).
  • Threat Modeling & Risk ManagementPerform AI-specific threat modeling (e.g., data poisoning, model theft, prompt injection, jailbreaks, supply-chain, inference attacks) using MAESTRO or similar framework. Align controls with leading frameworks: NIST AI RMF, ISO/IEC 27001, ISO/IEC 27090, ISO/IEC 42001, OWASP GenAI / LLM Top 10, CSA & MITRE ATLAS.
  • Security Control Design & ImplementationDefine and oversee implementation of controls for:Training & data pipelines (data quality, provenance, labeling, PII protection). Model & artifact integrity (signing, SBOM, secure registries). Access control, isolation, rate limiting, and abuse detection. Secure prompt engineering and guardrail policies. Security prompt monitoring to detect ongoing attacks. Data security: data classification, data masking and DLP. MCP server hardening.
  • Reliability & TrustworthinessPartner with engineering and data science to embed robustness, observability, fallback strategies, and evaluation pipelines (safety, bias, toxicity, hallucination monitoring). Contribute to SLOs/SLAs for AI systems, including security and reliability KPIs.
  • Secure SDLC for AIEmbed AI security into CI/CD: scanning, dependency checks, policy-as code, red-teaming AI components pre- and post-release.
  • Incident Response & Red TeamingLLM bias detection. Perform red teaming activities to abuse and force AI hallucinations. Develop and maintain AI-specific playbooks (prompt abuse, model exfiltration, data leakage, compromised agents). Lead or support AI red/blue/purple teaming exercises using frameworks like MITRE ATLAS.
  • Governance, Compliance & PolicyAdvice on alignment with emerging AI regulations and standards (e.g., EU AI Act, regional laws, internal AI use policies). Define internal policies on responsible AI, data usage, model lifecycle, and 3rd-party AI risk management.
  • Stakeholder LeadershipRun workshops, training, and awareness for engineering, security, and business teams.

Qualifications

Required Qualifications & Experience:

  • 8–12+ years in Cybersecurity, with 3–5+ years focused on AI/ML or data platforms (can be overlapping).
  • Hands-on experience with:Cloud platforms (Azure, AWS, GCP) and their AI services. At least one Agentic/GenAI stack (e.g., Transformers, LangChain/LlamaIndex, vector DBs, model gateways, MLOps platforms).
  • Proven track record designing or reviewing secure architectures for:ML pipelines, LLM/RAG systems, or agentic/automation platforms.
  • Strong understanding of:Cryptography, identity & access management, network & app security. Data protection & privacy (PII, PHI, DPIA concepts).
  • Experience working with or mapping to frameworks/standards such as:NIST AI RMF, ISO/IEC 27001, ISO/IEC 42001, SOC 2, OWASP Top 10 & OWASP GenAI/LLM Top 10, MITRE ATT&CK/ATLAS, CSA guidance.
  • Excellent communication skills: able to translate complex AI risks into clear business and technical requirements.

Core Technical & Domain Skills:

  • AI/ML & GenAI fundamentals:Model types (LLMs, encoders, diffusion, classical ML), training/inference flows. Data pipelines, feature stores, embeddings, vector databases.
  • AI Penetration testing:Prompt injection, model tampering, data poisoning, output manipulation, exfiltration, shadow AI, insecure plugins/integrations.
  • Platform & Infra:Kubernetes, containers, API gateways, secrets management, zero trust.
  • Observability:Logging, tracing, safety & quality metrics for AI systems. Health and latency monitoring.
  • Strong scripting/automation (Python preferred) for security tooling and assessments.

Certifications & Training (Required / Highly Desirable):

Essential:

  • One or more core security certifications:CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Lead Auditor.
  • One or more cloud security certifications:CCSK (Cloud Security Alliance), AWS Security Specialty, Azure Security Engineer, Google Professional Cloud Security Engineer.
  • AI & AI Security–specific training / certs (or commitment to obtain within 6–12 months):NIST AI RMF or ISO/IEC 42001-focused training. Certified AI Security Professional (CAISP / similar offerings that cover LLM/GenAI threats, MITRE ATLAS, OWASP LLM Top 10). OffSec / similar LLM & AI Red Teaming or GenAI security courses. Vendor AI/ML certifications (Azure AI Engineer, AWS Machine Learning Specialty, GCP ML Engineer) with demonstrated security emphasis.

Additional desirable:

  • GIAC/GWAPT/GXPN/GCLD or similar offensive / cloud / Appsec certs.
  • Formal training in:Secure MLOps & ML supply-chain security. Privacy engineering & data protection (e.g., CIPT, CDPSE). OWASP GenAI / LLM Top 10, MITRE ATLAS, CSA MAESTRO & other AI risk frameworks.

About Us

About Malomatia

malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.

Our mission

Empowering Qatar’s businesses and governments to leap into the digital future with agile, knowledge-driven solutions.

Our vision

To become Qatar’s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.

Driving change that makes a real impact

Since 2008, malomatia has been driving Qatar’s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation’s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar’s sustainable future.

Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.

Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.

Join us in shaping the future of technology in Qatar

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Malomatia's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Malomatia's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Malomatia's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.