About the Role:

Aurigo is seeking an experienced AI Security Engineer to secure our AI ecosystem, including GenAI applications, AI agents, MCP servers, and third-party AI platforms.

The role focuses on designing and implementing AI security controls, conducting security assessments, and establishing governance for AI solutions.

You will ensure compliance with enterprise security, privacy, and regulatory requirements while partnering with Product Engineering, Cloud, and Compliance teams to embed security across the AI lifecycle.

What You’ll Do

- Perform security assessments and threat modeling for AI-powered applications, including Lumina AI.
- Conduct AI-focused penetration testing (AI VAPT), adversarial testing, and red teaming.
- Assess AI applications against the OWASP Top 10 for LLM Applications and AI-specific attack vectors.
- Validate secure implementation of Retrieval-Augmented Generation (RAG), AI Agents, MCP Servers, vector databases, and AI orchestration frameworks.
- Perform security reviews of MCP (Model Context Protocol) servers before enterprise adoption.
- Review tool integrations exposed to AI agents.
- Develop security standards for deploying AI agents within Aurigo.
- Define and maintain AI security governance aligned with ISO/IEC 42001, NIST AI RMF, OWASP GenAI Security, and internal security policies.
- Establish AI security guardrails for enterprise-approved GenAI applications.
- Develop AI usage policies, secure development guidelines, and governance documentation.
- Assess model supply-chain risks and third-party AI services.
- Develop monitoring strategies for AI applications. Track emerging AI threats.
- Integrate AI telemetry into CrowdStrike, Sumo Logic, Netskope, Microsoft ATP, etc.
- Work with Netskope/CASB to identify AI application usage.
- Support secure MLOps practices.
- AI Security Posture Management (AISPM)



- Experience with AISPM solutions such as Microsoft Defender for Cloud AI-SPM, Wiz AI-SPM, or Protect AI to assess, monitor, and improve the security posture of AI applications, models, and AI infrastructure.

Required Skills & Qualifications

- Experience: 4-6 years in Cybersecurity, with exposure to AI/LLM Security, AI Application Security, or AI Governance.
- AI Security Testing: Hands-on experience in prompt injection, jailbreak testing, RAG security, data leakage, and adversarial testing.
- Security Platforms: Experience with Netskope (preferred), Zscaler, Palo Alto Prisma Access, or similar CASB/SASE/DLP solutions.
- Compliance & Governance: Knowledge of ISO 42001, ISO 27001, SOC 2, NIST, FedRAMP, CMMC, or similar security frameworks in SaaS environments.
- B.E./B.Tech in Computer Science, Information Technology, or a related discipline.

Nice to Have

- Familiarity with OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and AI security best practices.
- Exposure to OpenAI, AWS Bedrock, MCP, AI Agents, LangChain, vector databases, and AI Security Posture Management (AI-SPM) solutions.
- Relevant certifications such as OSAI, CEH, CISSP, ISO 42001 Implementer, AWS Security, or AWS AI Practitioner

About Aurigo:

Aurigo is an AI-native capital program management platform trusted by over 300 customers managing more than $450 billion in capital programs across North America.

With over 40,000 projects delivered, Aurigo helps organizations in transportation, water and utilities, healthcare, higher education, and government plan, build, and manage infrastructure with confidence.

Recognized as one of the Top 25 AI Companies of 2024 and a Outstanding Place to Work for three consecutive years, we leverage artificial intelligence to create smarter, more connected outcomes.

At Aurigo, we don't just build software — we help shape the future of infrastructure.

📌 AI Security Engineer (Karnataka)
🏢 Aurigo Software Technologies
📍 Karnataka