• Own cloud and application security, including AWS security architecture, IAM, network security, and secure configuration management • Drive and continually improve application security practices, including secure coding guidance, threat modeling support, and automated security testing in the SDLC • Lead the incident response program, including playbook development, on-call readiness, threat detection, and response coordination • Manage vulnerability management processes, ensuring risks are identified, triaged, and remediated effectively with engineering teams • Maintain and evolve security tooling, including monitoring, logging, SIEM/alerting, and secrets management • Collaborate with engineering and platform teams to embed security considerations into design and architectural decisions • Contribute to the unified control framework, ensuring strong security foundations for ISO 27001 and SOC 2 • Own corporate and IT security, including endpoint management (e.g., MDM), identity and access management, and oversight of the external IT provider • Lead security reviews by our customers, acting as a confident, trusted partner to enterprise clients throughout their evaluation process • Stay ahead of emerging threats, technologies, and best practices to continuously uplift Apheris’ security posture

• Enabling teams to integrate the necessary activities and tools into their daily business operations • Be responsible for evaluation of service and creating security reports. • Working with specific teams and providing guidance on how the security finding can be addressed • Working closely with other members of Security community in the organization.

• You will stay on top of advances in AI and how Simbian can use them to make security operations easier, faster, more accurate • You will own the product roadmap for one or more of our AI Agents, and drive it to reality in partnership with Engineering, Design, Marketing, Sales, Founders • You will distill customer feedback and drive solutions • You will co-own GTM with the marketing and sales teams and continuously evolve the best way to land the product in the market • You will track competitors and partners to ensure Simbian’s offerings stay differentiated.

Role Description As a leading financial institution in Egypt, we are heavily investing in localized AI and Machine Learning capabilities to drive innovation while maintaining total data sovereignty. Our Cybersecurity Department is looking for a highly skilled AI Cybersecurity Engineer with a deeply offensive mindset. Operating entirely within our secure, high-performance on-premises infrastructure, you will act as an internal adversary. Your mission is to proactively threat model, simulate advanced cyberattacks (Red Teaming), and manage algorithmic risks to detect and neutralize vulnerabilities in our AI systems before they can be exploited. Key Responsibilities - Predictive AI Threat Modeling: Lead advanced threat-modeling exercises across the bank’s localized AI/ML pipelines, data repositories, and training environments. Anticipate sophisticated attacker behaviors to design preemptive security guardrails before models are moved to production. - AI Red Teaming & Offensive Simulations: Conduct targeted offensive operations and ethical hacking against our on-premises AI infrastructure. Simulate real-world adversarial attacks, including data poisoning, model inversion, membership inference, evasion attacks, and prompt injection. - Framework Mapping with MITRE ATLAS: Implement and operationalize the MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) framework. Map identified vulnerabilities to ATLAS tactics and techniques to build a robust, AI-specific defensive matrix aligned with traditional MITRE ATT&CK. - On-Premises Infrastructure Hardening: Assess and secure the physical and virtual infrastructure hosting our AI workloads, including bare-metal GPU clusters, local containerized environments (Kubernetes/OpenShift), and private data registries, ensuring strict isolation from external threats. - Proactive Risk Management & Early Detection: Collaborate with the SOC and data engineering teams to build predictive detection use-cases and custom alerts. Identify the early warning signs of an AI-targeted attack or data exfiltration attempt before malicious actors can compromise model integrity. Qualifications - 5+ years of dedicated experience in Offensive Security, Red Teaming, or Advanced Penetration Testing, with a proven pivot and at least 2 years of hands-on experience securing or attacking AI/ML workloads. - Prior experience working within a regulated financial institution in Egypt. Understanding of the security constraints, compliance mandates, and audit rigor required by the Central Bank of Egypt (CBE) for on-premises operations. - Expert-level knowledge of MITRE ATLAS and the OWASP Top 10 for Large Language Models (LLMs). Proven track record of translating these theoretical frameworks into practical, automated offensive playbooks. - Strong proficiency in Python or bash scripting to build custom exploit or testing tools. - Deep understanding of on-premises infrastructure components (Linux administration, private networking, storage area networks). - Direct experience with container security (Docker, Kubernetes) and secure MLOps pipelines. Requirements - Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a strictly related field. - Highly valued offensive certifications: OSCP, OSCE, CRTP, or GPEN, alongside any specialized AI/ML security credentials. - A relentlessly curious, adversarial mindset balanced with strong risk management disciplines. - The ability to clearly articulate complex, highly technical AI vulnerabilities into actionable remediation plans for data scientists and senior banking executives. - Fluency in English. Benefits - Attractive, market-leading salary package. - Clear career advancement path with professional development opportunities.