Job Summary :

We are looking for an experienced Principal Cyber Security Engineer with 10+ years of experience in Cyber Security, Cloud Security, and Security Architecture to lead the security strategy for our AI-native SaaS platform.

The ideal candidate will have strong hands-on expertise in securing AI/LLM infrastructure, AI agents, APIs, databases, cloud platforms, Kubernetes, containers, Linux servers, and multi-tenant SaaS applications.

This role will be responsible for designing and implementing end-to-end security architecture, establishing Zero Trust and DevSecOps practices, managing security risks and vulnerabilities, and supporting compliance with industry security and AI governance standards.

Roles & Responsibilities :

- Design and implement end-to-end security architecture for enterprise AI-native SaaS platforms.

- Define security architecture, standards, controls, and best practices across application, infrastructure, cloud, data, and AI layers.

- Secure LLMs, AI agents, model APIs, GPU infrastructure, inference workloads, AI pipelines, and associated data flows.

- Implement security controls against AI/LLM risks including prompt injection, data leakage, unauthorized tool access, model/API abuse, and insecure agent interactions.

- Secure databases including PostgreSQL, Redis, Neo4j, and Vector Databases through encryption, RBAC, auditing, network controls, secrets management, and secure backup/recovery.

- Design and implement secure API Gateway architecture using OAuth 2.0, OIDC, JWT, mTLS, WAF, API authorization, throttling, and rate limiting.

- Secure cloud environments across AWS, Azure, and/or GCP.

- Implement security controls for Kubernetes, Docker, container registries, Linux servers, networking, and cloud-native workloads.

- Drive Zero Trust Architecture, IAM, RBAC, PAM, MFA, Secrets Management, and Key Management practices.

- Integrate security into CI/CD pipelines using DevSecOps, SAST, DAST, SCA, IaC scanning, secrets scanning, and container/image security.

- Implement and manage CSPM, SSPM, CASB, SIEM, WAF, IDS/IPS, EDR, and vulnerability management capabilities.

- Lead vulnerability assessments, penetration testing, threat modeling, remediation programs, and security reviews.

- Establish security logging, monitoring, detection, alerting, and incident response processes.

- Participate in security incident investigation, root-cause analysis, containment, remediation, and post-incident reviews.

- Support security and compliance programs aligned with ISO 27001, ISO 42001, SOC 2, GDPR, HIPAA, and OWASP standards and guidance.

- Conduct security architecture and design reviews for new products, services, APIs, and infrastructure.

- Mentor engineering, DevOps, SRE, and security teams and drive a security-first engineering culture across the organization.

Experience & Qualifications :

- Bachelor's or Master's degree in Computer Science, Cyber Security, Information Security, Information Technology, or a related field.

- 10+ years of experience in Cyber Security, Cloud Security, Application Security, Infrastructure Security, or Security Architecture.

- Strong experience designing and securing enterprise SaaS or cloud-native platforms.

- Hands-on experience with cloud, Kubernetes, containers, APIs, databases, IAM, and security monitoring technologies.

- Experience conducting security architecture reviews, threat modeling, vulnerability assessments, and risk assessments.

- Strong understanding of modern AI/LLM security risks and controls.

- Ability to work closely with Engineering, DevOps, SRE, Product, AI/ML, IT, and Compliance teams.

- Strong technical leadership, communication, problem-solving, and stakeholder-management skills.

Preferred Qualifications :

Security certifications such as CISSP, CCSP, CISM, OSCP, AWS Security Specialty, Azure Security Engineer, Google Professional Cloud Security Engineer, or Kubernetes Security Specialist (CKS) are preferred but not mandatory.

Candidate Profile :

We are looking for a hands-on security leader and architect who can define security strategy while working closely with engineering teams to implement practical security controls. The candidate should have deep expertise in cloud-native and SaaS security and a strong understanding of the emerging security challenges associated with Generative AI, LLMs, AI agents, and enterprise AI platforms.