Description

Key Skills: Application Security, AI Security, DevSecOps, Security Architecture, LLM Security, AI Agents, RAG, API Security, Cloud Security, Threat Modeling, OWASP, NIST AI RMF, Kubernetes, IAM, Zero Trust, AWS, Azure, GCP

Roles & Responsibilities:

• Lead security architecture reviews for applications, APIs, cloud, and AI systems.
• Design secure architectures for applications, LLM, RAG, and AI agent solutions.
• Lead AppSec, DevSecOps, and AI Security projects.
• Identify and address AI security risks such as prompt injection, data leakage, and excessive permissions.
• Review application architecture, APIs, IAM, data flows, encryption, and third-party integrations.
• Define security controls for CI/CD pipelines, Kubernetes, containers, IaC, and software supply chains.
• Design AI security guardrails, including input/output controls, tool restrictions, and human approval.
• Conduct threat modeling and security testing for AI and LLM applications.
• Define security monitoring and incident response requirements.
• Work with senior stakeholders to define security roadmaps and risk priorities.
• Mentor and guide AppSec and AI Security teams.

Experience Required:

• 6+ years of experience in Application Security, DevSecOps, Product Security, or Security Architecture.
• 2+ years of experience in consulting, project leadership, or client-facing roles.
• Hands-on experience with LLM applications, AI agents, RAG, and AI security.
• Experience with AI frameworks such as LangChain, LangGraph, CrewAI, AutoGen, or similar.
• Strong knowledge of application, API, IAM, cloud, and data security.
• Experience with AWS, Azure, and/or GCP security architecture.
• Strong experience in threat modeling, risk assessment, and secure SDLC.
• Knowledge of OWASP, NIST, ISO 27001, CIS Controls, and NIST AI RMF.
• Experience with prompt injection, jailbreak testing, AI red teaming, and adversarial testing.
• Knowledge of Kubernetes, CI/CD security, SAST, DAST, SCA, IaC, and container security.
• Strong communication and stakeholder management skills.
• Security certifications such as CISSP, CCSP, CSSLP, SABSA, or TOGAF are an advantage.

Education: Any Graduation / Any Post Graduation

Key Skills

Education

Any Graduate