Job Summary

We are looking for an experienced AI Tools Security Engineer to drive the security assessment, governance, and enterprise adoption of AI developer tools such as GitHub Copilot, Claude, Cursor, Gemini Code Assist, and similar AI coding assistants. The role focuses on evaluating AI tools before enterprise rollout, identifying security risks, establishing governance controls, and partnering with

InfoSec teams to enable secure developer productivity.

The ideal candidate should have a strong background in Application Security / Information Security, hands-on exposure to AI developer tools, and experience conducting security assessments, architecture reviews, and risk analysis within enterprise environments.

Key Responsibilities

- Perform security and risk assessments of AI developer tools before enterprise deployment.
- Review AI tool architecture, data flow, vendor security posture, and integration capabilities to identify potential security risks.
- Evaluate AI-specific threats such as prompt injection, data leakage, unauthorized integrations, and MCP (Model Context Protocol) server risks.
- Recommend security controls, governance policies, and feature enablement decisions based on risk assessments.
- Assign risk ratings (High/Medium/Low) and provide recommendations for go/no-go decisions.
- Partner with Application Security, Information Security, and Cyber Security teams to accelerate enterprise security reviews.
- Define and implement governance controls, audit logging, monitoring, and security reporting for AI tools.
- Collaborate with MDM/Packaging teams to deliver secure,



enterprise-approved versions of AI development tools.
- Embed security best practices into the software development lifecycle following DevSecOps principles.
- Independently own security assessments, communicate findings, and provide regular progress updates to stakeholders.

Required Skills & Experience

- 8+ years of experience in Information Security, Application Security, or DevSecOps.
- Hands-on experience securing AI developer tools such as GitHub Copilot, Claude, Cursor, Gemini Code Assist, Windsurf, Codex, or similar AI coding assistants.
- Strong understanding of Application Security and secure software development practices.
- Experience conducting:
- Security Risk Assessments
- Architecture Reviews
- Data Flow Reviews
- Vendor Security Assessments

- Knowledge of AI security threats, including:

- Prompt Injection
- Data Leakage
- AI Governance
- MCP (Model Context Protocol) Servers

- Experience implementing DevSecOps practices and integrating security into the SDLC.
- Ability to communicate technical risks effectively to both engineering and leadership teams.
- Solid stakeholder management skills with the ability to work independently in a fast-paced enterprise environment.

Preferred Skills

- Experience with MDM or enterprise software packaging solutions.
- Exposure to enterprise AI governance frameworks.
- Experience with AI observability or monitoring platforms such as LangSmith.
- Experience collaborating with centralized Information Security or Application Security teams.
- Knowledge of enterprise audit logging, compliance, and governance for AI platforms.

📌 Security Architect - AI (India)
🏢 TechBlocks
📍 India