06 Sep
|
Nextwebi IT Solutions
|
Bengaluru
06 Sep
Nextwebi IT Solutions
Bengaluru
We are looking for a Senior Security Engineer to join our Security Team and lead offensive security, penetration testing, AI/LLM security, and Dev Sec Ops initiatives. This role sits at the intersection of traditional application security and emerging AI security threats.
Key Responsibilities
Penetration Testing & Offensive Security
Lead end-to-end penetration testing across web applications, APIs, internal services, and cloud infrastructure.. Design and execute red-team exercises simulating real-world attacks.. Perform threat modelling for recent product features and architectures.. Develop custom exploits, scripts, and security tools.. Prepare clear and actionable penetration testing reports.. Manage third-party penetration testing vendors and responsible disclosure programs.. AI & LLM Security
Research and execute attacks against AI/LLM-powered systems, including prompt injection, jailbreaks, and indirect prompt injection.. Assess risks related to data exfiltration through model responses.. Assess security risks in Model Context Protocol (MCP)deployments,
including tool-call boundaries, context poisoning, and privilege escalation.. Build an internal threat library for AI attack patterns.. Develop and maintain red-teaming playbooks for LLM-based features.. Work with ML and Product teams to integrate security into the AI development lifecycle.. Dev Sec Ops
Integrate security controls into CI/CD pipelines, including SAST, DAST, SCA, secret scanning, and container scanning.. Define and enforce secure coding standards and security review gates.. Drive security automation across engineering teams.. Risk Assessment & Governance
Assess and prioritize security risks using frameworks such as CVSS, DREAD, or FAIR.. Maintain risk registers and track remediation progress.. Evaluate risks from third-party vendors, integrations, and open-source dependencies.. Support security audits, gap assessments, policies, standards, and exception processes.. Communicate security findings and
📌 Senior security engineer (Bengaluru)
🏢 Nextwebi IT Solutions
📍 Bengaluru