What We're Looking For

- AI Engineering: Hands-on experience with contemporary AI/ML frameworks and LLMs. Proficient in building AI-powered solutions, writing production-quality code, developing automation pipelines, and leveraging AI to improve security operations and engineering productivity.

- Compliance & Governance: Strong understanding of ISO 27001, SOC 2, and the DPDP Act , with practical experience implementing security controls, maintaining compliance evidence, supporting audits, and translating compliance requirements into operational processes.

- Security Engineering: Solid experience securing cloud environments ( AWS, Azure, or GCP ), identity and access management (IAM), application security, infrastructure security, and DevSecOps practices. Able to design and implement security controls rather than only recommend them.

- Offensive Security: Hands-on experience with Vulnerability Assessment and Penetration Testing (VAPT) , red teaming, reconnaissance, exploitation, and post-exploitation techniques. Ability to identify security weaknesses and provide practical remediation recommendations.

- Security Automation: Proficient in automating security operations using Python, Bash, PowerShell, Infrastructure as Code (Terraform), CI/CD pipelines, or AI-powered security tooling .

- Ownership & Problem Solving: Self-driven professional who thrives in fast-paced startup environments, takes end-to-end ownership of security initiatives,



and can execute effectively with minimal supervision.

- Communication: Excellent verbal and written communication skills with the ability to collaborate with engineering, product, legal, and leadership teams while clearly communicating technical concepts to non-technical stakeholders.

Nice to Have

- Professional certifications such as OSCP, CISSP, CEH, ISO 27001 Lead Implementer/Lead Auditor, AWS Security Specialty, or Azure Security Engineer (AZ-500) .

- Experience leading or supporting an organization's first SOC 2 Type I/II or ISO 27001 certification journey.

- Experience working in an early-stage startup or building a security function from the ground up.

- Hands-on experience securing AI/LLM applications , agentic AI systems, and implementing controls against LLM-specific threats such as prompt injection, data leakage, and model abuse.

- Familiarity with security monitoring, SIEM solutions, incident response, threat modeling, and cloud-native security tools.

Why This Role

- Real ownership — you build and run the security function, set the standards, and leave a lasting mark.

- Direct mentorship from an experienced Virtual CISO, with the autonomy to execute your own way.

- A rare blend of building, automating, defending, and attacking — no two weeks look the same.

- High-trust, high-impact, high-visibility work at a company that takes security seriously from day one.

📌 Security Engineer ( AI Compliance & Offensive Security ) (Jaipur)
🏢 Dreamcast
📍 Jaipur