Description

You will own application and AI security across the SDLC, embedding controls into cloud-native architectures and CI/CD pipelines.

This role is remote.

Responsibilities

• Embed security practices including secure coding, threat modeling, and automated testing into development workflows.
• Identify and mitigate risks such as injection flaws, authentication issues, API vulnerabilities, and misconfigurations.
• Implement DevSecOps controls, including secrets management, policy enforcement, and automated security testing.
• Secure AI applications against prompt injection, data leakage, and model abuse.
• Provide practical remediation guidance to developers and support incident analysis and root cause fixes.

Required Skills

• 5–8 years of experience in Application Security, DevSecOps, and cloud-native architectures.
• Programming proficiency in Java, Python, JavaScript, C#, or Go.
• Hands-on experience with SAST, DAST, SCA, container scanning, and IaC scanning tools.
• Strong knowledge of AWS, Azure, Docker, Kubernetes, and Terraform.
• Experience integrating security into CI/CD pipelines using GitHub Actions, GitLab, Jenkins, or Azure DevOps.
• Expertise in securing Web apps, APIs, and microservices.
• Knowledge of WAF and API protection against OWASP Top 10 threats.

Preferred Skills

• Background in software development.
• Experience with AI security and prompt injection mitigation.

Key Skills

Education

Any Graduate