Principal - AI ML and Cloud Security

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.

Our diverse portfolio consists of vaccines, specialty medicines, and general medicines.

Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

Domain focus: AI Engineering (agentic framework build and AI solution engineering); hands-on engineering of complex AI solutions in production, building reusable components, libraries and patterns for agent and platform workstreams.

Job Purpose:

The deepest hands-on engineering role in AI Engineering. You personally build the most complex AI solutions Cyber Architecture and Solutions delivers, lead the hardest engineering problems in the agentic framework, and develop the reusable components the rest of the team builds on.

About the team:

AI ML and Cloud Security is the function through which GSK is transforming security itself. The team designs and builds the agentic framework, a multi-agent platform moving security services across the Chief Security Office from rule-based to AI-driven operation. It owns AI architecture and AI engineering end to end: the agent layer, LLM orchestration, the AI and ML platform, and the data fabric pipeline that Cyber Architecture and Solutions designs, builds and tests before a managed service vendor operates it. The team also governs AI tool security posture, advises on cloud security across the Azure and GCP estate, and is the front door between GSK's business units and R&D and the technical AI function. AI security standards set here are binding on every AI initiative in GSK. Seventeen roles across the UK, India and the US.

What makes this role different. A build role for someone who writes production code every day and wants to keep doing so. Expect a technical interview covering LangChain or LlamaIndex, vector database selection and retrieval tuning, and how you would test an agent whose output is non-deterministic. Tutorial or proof-of-concept exposure will not be enough — we are looking for things you shipped and then maintained. There is no line management in this role, by design.

Key responsibilities:

This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:

• Personally build the most complex AI solutions Cyber Architecture and Solutions delivers, using LangChain, LlamaIndex, vector databases and production Python.

• Build the shared SDK, evaluation harness and reusable components the agent and platform workstreams both depend on.

• Lead the hardest engineering problems in the agentic framework build.

• Develop reusable engineering components, libraries and patterns the wider team builds on.

• Build to the architecture specification and raise design problems early rather than engineering around them.

• Write tests and documentation to vendor handover standard.

• Contribute to CI/CD pipelines and engineering tooling for AI workloads.

• Integrate agents with Splunk, Microsoft Sentinel, CrowdStrike and ServiceNow — writing and maintaining the connectors, not specifying them.

• Mentor engineers and review their code properly.

• Bring one toolchain change a quarter to the team with a working spike and a migration cost, not a recommendation.

• Use approved AI tools in your day-to-day work to improve your own productivity and your team's ways of working, sharing what works and applying sound judgement, including validating outputs and following GSK's Responsible AI, privacy and security requirements.

• Design components and APIs within the solutions you build, and document the trade-offs behind each design decision so the rationale survives handover.

• Apply GxP and data integrity expectations where what you build touches validated systems.

Basic Qualifications:

• 10+ years in AI or software engineering with a relevant technical degree — domain focus: AI Engineering (agentic framework build and AI solution engineering); hands-on engineering of complex AI solutions in production, building reusable components, libraries and patterns for agent and platform workstreams

• Agent build in production Python and Kubernetes — LLM integration, prompt-to-action engineering, LangChain or LlamaIndex orchestration, tool and function calling, and evaluation of non-deterministic output

• RAG pipeline engineering end to end — chunking and embedding strategy, vector database and index design, retrieval tuning and evaluation, hallucination and grounding checks

• LLM application security in code — direct and indirect prompt injection defences, output validation, secrets handling, tool-call allow-listing and audit logging

• Delivering to architecture specification with tests and documentation to vendor-handover standard — raising design problems back to architecture rather than engineering around them, and mentoring analysts

Preferred Qualifications:

• CI/CD pipelines for AI and ML platforms

• LLM evaluation frameworks (Ragas, DeepEval or equivalent), fine-tuning and prompt optimisation

• AI red-teaming tools such as Garak or PyRIT

• Cloud platform engineering on Azure or GCP

• Code review of junior engineers' work
• Typical tools and technologies: Production Python and Kubernetes, LangChain, LangGraph and LlamaIndex orchestration, vector databases and retrieval tuning across pgvector, Pinecone and Weaviate, model gateways such as LiteLLM, evaluation harnesses for non-deterministic output, reusable library and SDK design, CI/CD and automated testing.
  

#AGTech

 

Skills

AI for Cybersecurity, AI Safety Engineering, Application Security, Artificial Intelligence Techniques, Cloud Security, Computer Programming, Data Security, Identity Access Management (IAM), Information Systems, Infrastructure Security, LangChain (FrameWork), LlamaIndex, LLM Evaluation, ML Security, Operating Systems Security, Scripting, Security Engineering, Security Technologies, Security Testing, Vulnerability Management

 

 

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale.

People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

Inclusion at GSK:

As an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process.

Please contact our Recruitment Team at [email protected] to discuss your needs.

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.

It has come to our attention that the names of GlaxoSmithKline or GSK or our group companies are being used in connection with bogus job advertisements or through unsolicited emails asking candidates to make some payments for recruitment opportunities and interview. Please be advised that such advertisements and emails are not connected with the GlaxoSmithKline group in any way.

GlaxoSmithKline does not charge any fee whatsoever for recruitment process. Please do not make payments to any individuals / entities in connection with recruitment with any GlaxoSmithKline (or GSK) group company at any worldwide location. Even if they claim that the money is refundable.

If you come across unsolicited email from email addresses not ending in gsk.com or job advertisements which state that you should contact an email address that does not end in “gsk.com”, you should disregard the same and inform us by emailing [email protected], so that we can confirm to you if the job is genuine.