{"id":1252509,"url":"https://alion.io/job/astar-assistant-director-ai-enablement-security-engineering","title":"Assistant Director, AI Enablement & Security Engineering","company":{"id":50235,"name":"Agency for Science, Technology and Research","domain":"a-star.edu.sg","url":"https://alion.io/company/a-star-edu","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Embeddings","optional":false},{"name":"Function Calling","optional":false},{"name":"GCP","optional":false},{"name":"Hugging Face","optional":false},{"name":"LangChain","optional":false},{"name":"Least Privilege","optional":false},{"name":"LlamaIndex","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Machine Learning","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Red Teaming","optional":false},{"name":"Reranking","optional":false},{"name":"Semantic Kernel","optional":false},{"name":"Tool Use","optional":false},{"name":"Chroma","optional":true},{"name":"FinOps","optional":true},{"name":"Guardrails AI","optional":true},{"name":"Kubernetes","optional":true},{"name":"Llama","optional":true},{"name":"Milvus","optional":true},{"name":"NeMo Guardrails","optional":true},{"name":"OpenSearch","optional":true},{"name":"pgvector","optional":true},{"name":"Pinecone","optional":true},{"name":"PostgreSQL","optional":true},{"name":"SIEM","optional":true},{"name":"Weaviate","optional":true}],"status":"live","first_seen_at":"2026-09-25T18:36:13Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-09-28T22:58:06Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Position Summary\nThe Team Lead, AI Enablement & Security Engineering is a hands-on technical leadership role responsible for enabling the secure adoption of Generative AI, Large Language Models and agentic AI solutions across the IT division.\nThe role will go beyond policy writing to translate AI security, governance and risk requirements into practical architectures, engineering controls, reusable development patterns and assurance processes. The incumbent will design, prototype, implement and assess safeguards for LLM applications, Retrieval-Augmented Generation pipelines, AI agents and supporting AI platform services.\nWorking closely with cybersecurity, cloud platform, enterprise architecture, data governance, risk and application teams, the Team Lead will establish secure-by-design practices that allow AI solutions to be deployed safely, efficiently and at scale. The role will also build internal engineering capability through technical guidance, reusable assets, hands-on workshops and mentoring.\nKey Responsibilities\n1. AI Security Engineering and Technical Governance\nDefine and maintain secure-by-design architecture patterns, engineering standards, technical controls and security baselines for Generative AI, RAG and agentic AI solutions, aligned with OWASP, NIST AI RMF, MITRE ATLAS and applicable Singapore AI security guidance.\nDesign, implement and evaluate AI runtime guardrails across inputs, outputs, tool calls and data access to mitigate prompt injection, sensitive-data exposure, harmful content, excessive agency, insecure output handling and other adversarial behaviours.\nLead AI threat modelling, security assessments, testing and red-teaming across models, application, prompts, RAG pipelines, agent workflows, APIs, plugins, MCP servers and supporting infrastructure.\nDesign secure RAG architectures and AI agents incorporating identity-aware retrieval, access controls, metadata filtering, tenant isolation, source validation, retrieval-poisoning protection, least-privilege access, tool allowlisting, execution boundaries, approval checkpoints, credential isolation and auditable human oversight.\nConduct technical assurance reviews of internal and third-party AI solutions by validating architectures, configurations, vendor claims, security evidence and controlled proof-of-concept outcomes.\nContribute technical inputs to the AI inventory, covering deployed models, owners, approved data sources, hosting locations, dependencies, security classifications and control status.\nPartner with cybersecurity, risk, legal, data protection and governance team to translate policies and risk decisions and assurance outcomes into enforceable platform and application controls.\n2.Hands-on AI Enablement, Architecture and Prototyping\nDesign and prototype secure, scalable AI solutions using commercial and open-source models, cloud AI services, AI gateways, orchestration frameworks and agent development platforms.\nDevelop reference architectures and implementation patterns for common use cases such as enterprise chat, knowledge assistants, secure RAG, workflow automation, coding assistants and tool-using agents.\nImplement or configure AI gateway controls covering identity, authentication, authorisation, model access, secret management, quotas, rate limits, content inspection, routing, fallback, logging and cost controls.\nCreate reusable, pre-hardened development assets, including code templates, deployment pipelines, prompt patterns, agent configurations, security test cases, policy-as-code controls and infrastructure-as-code modules.\nEstablish secure AI development and deployment practices into DevSecOps pipelines, architecture reviews, release gates and production-readiness assessments.\nEvaluate emerging AI models, frameworks, agent protocols, guardrail technologies and security tools through structured experiments, proofs of concept and applied technical learning\nProvide hands-on technical advisory and troubleshooting support to project teams during solution design, prototyping, security review and production onboarding.\nBalance rapid experimentation with enterprise requirements for security, data protection, resilience, supportability, interoperability and vendor portability.\n3. AI Monitoring, Assurance and Operational Observability\nDefine telemetry, logging, audit and pre-production evaluation requirements such as acceptance thresholds for security, reliability and responsible AI requirements to monitor AI applications, model interactions, retrieval activities, agent decisions and external tool calls.\nImplement or integrate monitoring capabilities to detect abnormal usage, prompt injection attempts, policy violations, unexpected tool execution, data exfiltration indicators, repeated guardrail failures and anomalous consumption patterns.\nEstablish security and operational metrics such as policy violation rates, guardrail interventions, attack success rates, evaluation pass rates, latency, availability, token consumption, model usage and cost.\nDevelop dashboards and reports that provide engineering teams and management with visibility into AI usage, security posture, operational performance and control effectiveness.\nCoordinate with security operations, platform operations and application support teams to develop incident detection, escalation, containment, investigation and post-implementation review procedures for AI-related events.\nReview production evidence, security telemetry and assurance findings to identify control weaknesses, recurring failure patterns and opportunities to improve AI architectures and engineering standards.\n4. Secure AI capability development\nUplift A*STAR's proficiency in secure AI engineering and implementation. This would be achieved through hands-on workshops, labs and technical clinics covering secure AI application development, prompt and context security, RAG protection, agent tool security, AI gateway controls, threat modelling and AI security testing.\nDevelop a practical secure AI engineering capability programme for architects, developers, platform engineers, cybersecurity professionals and product managers.\nCreate role-based learning paths, engineering playbooks, sample applications, coding exercises and reusable reference materials.\nUplift the proficiency of fellow IT colleagues, building federated capability in secure AI delivery. This would be achieved through advising project teams on real implementation challenges and embedding secure AI engineering practices, and communities of practice to share patterns, lessons learned, emerging threats, reusable components and implementation experience. \nEstablish technical competency expectations and proficiency indicators for key AI engineering and AI security roles, in partnership with IT leadership and learning development teams.\nQualifications\nEducation\nBachelor’s degree or equivalent in Computer Science, Computer Engineering, Cybersecurity, Information Systems or another relevant technical discipline.\nA postgraduate qualification in cybersecurity, artificial intelligence, machine learning or a related field is advantageous but not mandatory.\nProfessional Experience\nAt least 8 years of relevant professional experience across software engineering, cybersecurity, cloud architecture, platform engineering, machine learning engineering or related technical domains.\nAt least 2 years of recent hands-on experience designing, building, securing or assessing Generative AI, LLM, RAG or agentic AI solutions.\nDemonstrated experience leading technical workstreams, mentoring engineers, establishing engineering standards or influencing architecture across multiple teams.\nExperience operating in an enterprise, regulated, public-sector, research-intensive or similarly complex environment is advantageous.\nExperience\nEssential Technical Capabilities\nHands-on programming or scripting experience in Python, with the ability to independently develop prototypes, test harnesses, API integrations and security automation.\nPractical experience implementing LLM applications using one or more relevant frameworks or SDKs, such as LangChain, LlamaIndex, Semantic Kernel, Hugging Face, cloud AI SDKs or equivalent technologies.\nGood understanding of LLM application architectures, including prompts, context management, embeddings, vector retrieval, reranking, tool use, agents, model gateways and model hosting patterns.\nPractical understanding of AI security risks, including prompt injection, jailbreaks, sensitive-information disclosure, retrieval poisoning, insecure output handling, excessive agency, model denial of service and AI supply-chain risks.\nExperience designing or evaluating application security controls, API security, identity and access management, secrets management, network controls and secure cloud architectures, or working with other teams or vendors on the same..\nExperience with at least one major cloud platform-AWS, Microsoft Azure or Google Cloud-and familiarity with containerised platforms, CI/CD pipelines, infrastructure as code and modern observability practices.\nAbility to analyse technical architectures, configurations, logs, API behaviours and security test evidence rather than relying solely on vendor declarations or compliance documentation.\nDesirable Technical Capabilities\nExperience with AI or LLM guardrail technologies such as but not limited to NVIDIA NeMo Guardrails, Llama Guard, Guardrails AI, cloud-native content safety services or equivalent policy-enforcement technologies.\nExperience in one or more areas including AI security testing, adversarial evaluation, red teaming, penetration testing or security research, or in working with other teams or vendors on the same.\nFamiliarity with vector technologies such as pgvector, OpenSearch, Pinecone, Milvus, Weaviate, Chroma or equivalent platforms, including metadata-based access control and multi-tenant retrieval patterns.\nExperience with AI gateways, API management platforms, model routers, agent gateways, Model Context Protocol, agent-to-agent communication or policy enforcement for autonomous AI systems.\nFamiliarity with AI risk and security guidance such as OWASP GenAI Security guidance, NIST AI RMF, MITRE ATLAS, ISO/IEC 42001, Singapore’s Model AI Governance Framework and CSA Guidelines on Securing AI Systems.\nExperience integrating AI telemetry with enterprise monitoring, SIEM, security operations or FinOps platforms, or working with other teams or vendors on the same.\nLeadership and Stakeholder Capabilities\nAbility to provide technical advice while remaining sufficiently hands-on to prototype solutions, inspect implementations and support complex troubleshooting.\nStrong judgement in balancing security, usability, delivery speed, cost, scalability and operational sustainability.\nAbility to translate technical weaknesses and attack scenarios into clear business risks, control decisions and prioritised remediation actions.\nAbility to work across cybersecurity, architecture, cloud, application development, data governance, procurement, risk, legal and business teams.\nDemonstrated ability to uplift the proficiency of fellow colleagues in other IT functional teams, in his/her area of expertise.\nCertifications\nRelevant certifications are advantageous but should not be mandatory. These may include:\nCISSP, CCSP, CSSLP or equivalent cybersecurity certifications;\nAWS, Azure or Google Cloud professional-level architecture or security certifications;\nKubernetes, DevSecOps or application security certifications;\nAI, machine learning or responsible AI qualifications from recognised institutions or technology providers.\nEquivalent demonstrated technical experience should be considered in place of formal certifications.","description_format":"text","description_chars":11745,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-09-25T18:36:13Z"}],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":0.9,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":26,"reasons":["conf:59","velocity","win:early","comp:brand"],"computed_at":"2026-09-28T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/astar-assistant-director-ai-enablement-security-engineering","json_url":"https://alion.io/job/astar-assistant-director-ai-enablement-security-engineering.json","meta":{"generated_at":"2026-09-29T02:48:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":2503,"day_limit":5000,"remaining_today":2497,"minute_limit":60,"resets_at":"2026-09-30T00:00:00Z"}}}