Junior AI & SaaS Product Security Engineer
Job Description
This is an excellent entry point for a security professional looking to grow into seasoned security specialist. Our team main focus is AI and SaaS security in a global pharma company. As an Associate Specialist on the Strategic Platforms Security & AI Security team, you will support security assessments and deployment of security controls for SaaS systems, contribute to AI security initiatives, and develop hands-on expertise across a range of modern security tooling and platforms. You'll be mentored by experienced security engineers and work across cross-functional teams, gaining exposure to both technical security practice and enterprise risk management.
What will you do in this role:
- Evaluate the security posture of enterprise SaaS platforms. Reviewing configurations, identifying misconfigurations, and helping design mitigations
- Contribute to building and documenting security patterns for SaaS and AI systems that other teams can adopt
- Contribute to security evaluations of AI-based systems, applications, and agents learning to identify risks specific to LLM-powered and generative AI systems.
- Support the implementation and operationalization of AI security controls
- Help maintain and monitor security tools and dashboards, ensuring that applications deployed in our environments adhere to organizational security standards and compliance requirements.
What should you have:
- Degree in Information Technology, Computer Science or any Technology stream.
- 1+ years of experience in cybersecurity, IT, or a related field (internships and academic projects count)
- A foundational understanding of application or cloud security concepts
- Willingness to learn fast and work through ambiguity - You're curious by default
- Genuine curiosity about AI and generative AI security is a plus
- Exposure to cloud environments (AWS, Azure, or GCP), even at a basic level is a great benefit
- Some scripting or automation experience is nice to have
- You communicate clearly and ask good questions rather than making assumptions
What we offer
- Exciting work in a great team, global projects, international environment
- Opportunity to learn and grow professionally within the company globally
- Hybrid working model, flexible role pattern
- Competitive salary & incentive pay
- Pension and health insurance contributions
- Internal reward system and referral scheme
- 5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contribution
- Cafeteria for tax free benefits according to your choice (meal vouchers, sport, culture, health, travel, etc.), Multisport Card
- Vodafone, Raiffeisen Bank, Foodora, and discount programmes
- Up-to-date laptop and iPhone
- Parking in the garage, showers, refreshments, massage chairs, library, music corner
Ready to take up the challenge? Apply now!
Know anybody who might be interested? Refer this job!
Required Skills:
Application Infrastructure, Change Catalyst, Cloud Security, Digital Forensics, Identity Access Management (IAM), Incident Response, Information Security Engineering, Information Technology (IT) Performance Architecture, IT Infrastructure Management, Security Standards Development, Server Hardware Configuration, Systems Architecture, Technology Deployments, Vulnerability ManagementPreferred Skills:
Current Employees apply HERE
Current Contingent Workers apply HERE
Search Firm Representatives Please Read Carefully
Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.
Employee Status:
RegularRelocation:
VISA Sponsorship:
Travel Requirements:
Flexible Work Arrangements:
HybridShift:
Valid Driving License:
Hazardous Material(s):
Job Posting End Date:
09/5/2026*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.