AI USAGE Security Consultant – Secure AI Coding Assistant Deployment (Bitbucket / SaaS Company)

We are an established software company looking for an experienced AI Security Consultant to advise us before integrating Artificial Intelligence coding assistants with our software development environment. We currently maintain our source code in Bitbucket and are evaluating AI coding assistants that connect directly to our repositories. Before moving forward, we want an independent security expert to review the available options and provide recommendations to ensure our proprietary source code remains confidential and is never used to train public AI models. This is an advisory project—not software development. Objectives. We need a PROVEN expert who can help us understand: The safest way to connect AI to Bitbucket Which AI coding platforms are appropriate for commercial software companies Enterprise vs. consumer AI subscriptions Data privacy protections Source code retention policies AI model training policies Intellectual property protections Security architecture Access controls Identity management Audit logging Compliance considerations Best practices for protecting proprietary software Questions We Need Answered Examples include: Can our code ever be used to train public AI models? Which vendors offer contractual guarantees that customer code is never retained or reused? What enterprise subscriptions are required? What security settings should be enabled? Should AI connect directly to Bitbucket, or should another architecture be used? How should developer permissions be configured? What logging and monitoring should be enabled? What are the risks of allowing AI access to an entire repository? What is the safest workflow for our development team? Deliverables Required Experience 10+ years in Cybersecurity, Application Security, or Cloud Security Experience securing commercial SaaS environments Experience with Bitbucket, GitHub Enterprise, or GitLab Experience with AI coding assistants such as GitHub Copilot Enterprise, Cursor Enterprise, Claude Code, Windsurf Enterprise, or similar Experience with AWS security Strong understanding of IAM, SSO, MFA, RBAC, least privilege, encryption, and audit logging Familiarity with SOC 2, ISO 27001, and secure software development practices Excellent written communication Nice to Have -- Experience implementing AI governance policies Experience reviewing AI vendor security documentation Experience helping organizations adopt AI coding tools CISSP, CCSP, AWS Security Specialty, or similar certifications Proposal Requirements Please include: A summary of similar projects Which AI coding platforms you have secured Your recommendations for enterprise AI solutions Your availability Expected timeline Please propose your engagement based on the deliverables above.