Role Overview

We are looking for a senior security leader to define and scale end-to-end Product Security across up-to-date cloud-native and AI-driven systems.

You will own security across the full lifecycle—from secure design and threat modeling, to DevSecOps pipeline security, to AI/LLM security governance, to vulnerability management and PSIRT operations.

This is a hands-on leadership role requiring deep technical expertise and the ability to influence engineering teams at scale while enabling rapid, secure product delivery.

What You Will Own (Outcomes)
Secure-by-Design Engineering
Define and enforce Secure SDLC standards across product engineering teams
Lead architecture-level security reviews for high-risk systems and features
Drive threat modeling (STRIDE / MITRE ATT&CK;)
Establish reusable secure design patterns (identity, secrets, crypto, data protection)
DevSecOps at Scale
Embed security controls into CI/CD pipelines (shift-left + shift-right)
Operationalize SAST / SCA / Secrets scanning / IaC security




Implement DAST and runtime security validation
Drive SBOM generation, artifact signing, and provenance controls
Define release security gates and remediation SLAs
Embed security controls in CI/CD pipelines (pre-commit → deploy): SAST, SCA, secret scanning, IaC/K8s policy-as-code, SBOM generation, artifact signing and provenance.
Operationalize DAST via Veracode integration patterns and developer runbooks; track fix SLAs, break-glass criteria, and remediation metrics.
Partner with Cloud & Platform teams to ensure telemetry, detection, and incident hooks align with SOC/SIEM runbooks.
AI / LLM & Data Security
Define and implement AI/ML and LLM security controls
Secure AI lifecycle: training, inference, deployment
Mitigate prompt injection, data leakage, and model abuse risks
Enforce data protection via DLP frameworks (e.g., Microsoft Purview)
Establish AI governance, lineage, and monitoring .
Engineer AI security gua

📌 Ai Product Security Bengaluru
🏢 Grant Thornton INDUS
📍 Bengaluru