We are looking for a Senior Application Security Engineer to security architecture reviews, and code security assessments across microservices and cloud-native applications. This position will be full time and Remote.
What Youll Do
- Lead threat modeling, security architecture reviews, and code security assessments across microservices and cloud-native applications
- Perform SAST, DAST, SCA, and manual penetration testing on applications
- Identify, prioritize, and track remediation of vulnerabilities across the application portfolio
- Define and enforce secure coding standards and security best practices
- AI / LLM Security (AI Transformation Center Focus)
- Threat model AI systems identify and mitigate risks unique to LLM-powered applications: prompt injection, jailbreaking, model inversion, data poisoning, and training data leakage
- Conduct adversarial testing (red-teaming) of LLM and generative AI applications before production release
- Define and implement guardrails and content safety controls for LLM inputs/outputs (e.g., PII detection, toxicity filtering, output validation
- Evaluate and secure AI supply chain third-party model APIs (OpenAI, Anthropic, Azure OpenAI),
open-source model weights (Hugging Face), and fine-tuned models
- Establish policies around RAG (Retrieval-Augmented Generation) security — securing vector databases, embedding pipelines, and document ingestion workflows
- Implement controls against indirect prompt injection in agentic AI systems and multi-step LLM pipelines
What You'll Need
Required:
- DevSecOps & CI/CD Security
- Design and maintain DevSecOps pipelines integrating security gates into GitHub Actions workflows
- Automate SAST, container scanning, secrets detection, SCA, and AI model scanning within CI/CD pipelines
- Implement and manage Argo CD security policies, RBAC configurations, and deployment guardrails for GitOps workflows
- Enforce branch protection, signed commits, and secrets management in GitHub
- Integrate ML model integrity checks and artifact signing into AI deployment pipelines
- Container & Orchestration Security
- Harden Docker images — least-privilege, minimal base images, multi-stage builds, and image signing
Email :
[email protected]
📌 Senior Application Security Engineer (Bengaluru)
🏢 Cai Info India
📍 Bengaluru