About the Role

We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards. If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

Employment Type: Full-time

Location: Indore (Work from Office)

Key Responsibilities

- Build and integrate robust security controls into CI/CD pipelines, enabling automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC), with security gates enforced on every merge.
- Design and implement code provenance tracking to identify AI-generated code, record the AI models used, and capture reviewer approvals throughout the development lifecycle.
- Establish structured code review workflows that incorporate technical specifications, security scan results, and code provenance for comprehensive security validation.
- Optimize security scanning tools and workflows to minimize false positives, improve signal quality, and drive greater developer adoption.
- Investigate, prioritize, and manage security findings through established remediation, tracking, and documentation processes.
- Contribute to AI governance standards by defining secure practices for AI tool usage and establishing controls for AI-generated code.
- Conduct independent security assessments of internally developed, third-party,



and vendor-supplied code to ensure alignment with organizational security standards and requirements.

Required Skills & Experience

- Demonstrated experience implementing automated security scanning, policy enforcement, and security gates rather than simply operating existing tools.
- Strong knowledge of SAST, SCA, secret scanning, DAST, and Infrastructure as Code (IaC) security scanning practices and tools.
- Robust understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure preferred.
- Ability to design, build, and own security automation and governance solutions from the ground up.
- Strong security judgment with the ability to balance risk reduction and developer productivity by minimizing unnecessary alerts and false positives.
- Excellent communication skills, with the ability to translate complex security risks into clear, concise, and business-friendly language.
- Strong analytical and problem-solving skills, with the ability to independently assess security risks across internal, third-party, and external codebases.

Preferred Qualifications

- Hands-on experience securing AI-generated code, with knowledge of LLM security risks, prompt injection, code provenance, and AI governance.
- Hands-on experience with security tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar solutions.
- AWS certification, preferably Solutions Architect – Associate, or willingness to obtain the certification within 90 days.
- Security certifications such as OSCP, GWAPT, CSSLP, or equivalent are preferred.
- Experience developing custom security detection rules and policies, including custom Semgrep rules.

Please send your resume at [email protected]

📌 AppSec / AI Security Engineer (Indore)
🏢 FiveExceptions Software Solutions
📍 Indore