Location

Chennai, India

Business

Energy Systems

Position type

Full Time

Contract type

Permanent Employee

Job ID

7771

Overview

About us

We are the independent expert in assurance and risk management. Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts and reliable insights so that critical decisions can be made with confidence. As a trusted voice for many of the world’s most successful organizations, we use our knowledge to advance safety and performance, set industry benchmarks, and inspire and invent solutions to tackle global transformations.

About Energy Systems

We help customers navigate the complex transition to a decarbonized and more sustainable energy future. We do this by assuring that energy systems work safely and effectively, using solutions that are increasingly digital. We also help industries and governments to navigate the many complex, interrelated transitions taking place globally and regionally, in the energy industry.

About the role

Hands-on Senior Cybersecurity Lead to drive application, product, and offensive security across our cloud platforms. You will lead penetration testing, application security, and vulnerability management; embed Secure SDLC/DevSecOps with engineering; secure and govern AI-enabled capabilities; and communicate security risk clearly to technical and business stakeholders. This role sets security practices, mentors others, and raises the security posture of Platform Services.

Key Responsibilities

- Lead application & product security across internal and cloud-based apps; drive Secure SDLC / DevSecOps with engineering.
- Own penetration testing for web, API, cloud, and infrastructure – scope, test, report, track remediation, retest.
- Run vulnerability management with risk-based prioritisation (exploitability, exposure, impact, asset criticality) and remediation to closure.
- Provide cloud security guidance for AWS and/or Azure – review IAM, network, logging, encryption, and CI/CD security.
- Integrate security testing and automation into CI/CD; improve secure-coding practices and tooling.
- Secure & govern AI: control and monitor AI/LLM and AI-assisted development risk across the platform (see AI Security & Governance below).
- Review designs to catch risk early (architecture/design reviews, threat modelling).
- Lead & collaborate: mentor security staff, act as SME, and partner with Engineering, DevOps, Architecture, and Product.
- Governance: support ISO 27001 / SOC 2 controls, audits and evidence, and security metrics/reporting.

AI Security & Governance

- Establish how AI-related risk is identified, secured, and continuously monitored across AI/LLM-enabled features and AI-assisted development in Platform Services.
- Define and enforce security controls and governance for AI/LLM-enabled applications and AI-assisted development tools.




- Identify and mitigate AI-specific risks: sensitive-data and source-code exposure, prompt injection, insecure or hallucinated output, excessive tool/agent permissions, model and supply-chain risk, and IP/licensing exposure.
- Apply least-privilege access for AI tools and agents, tool allowlists, retrieval/data-loss controls, and input/output validation.
- Continuously monitor and log AI usage, prompts, and agent actions; set alerting, anomaly detection, and human-oversight/escalation for AI-driven workflows.
- Align AI usage with responsible-AI and governance frameworks (e.g., ISO/IEC 42001, NIST AI RMF) and provide evidence for audits and customer assurance.

What we offer

- Flexible work arrangements for better work-life balance
- Generous Paid Leaves (Annual, Sick, Compassionate, Local Public, Marriage, Maternity, Paternity, Medical leave)
- Medical benefits ( Insurance and Annual Health Check-up)
- Pension and Insurance Policies (Group Term Life Insurance, Group Personal Accident Insurance, Travel Insurance)
- Training and Development Assistance (Training Sponsorship, On-The-Job Training, Training Programme)
- Additional Benefits (Long Service Awards, Mobile Phone Reimbursement)
- Company bonus/Profit share.

Benefits may vary based on position, tenure/contract/grade level DNV is an Equal Opportunity Employer and gives consideration for employment to qualified applicants without regard to gender, religion, race, national or ethnic origin, cultural background, social group, disability, sexual orientation, gender identity, marital status, age or political opinion. Diversity is fundamental to our culture and we invite you to be part of this diversity.

About you

Must Have Experience

- 8–10+ years in cybersecurity, with strong hands-on application security and penetration testing.
- Web and API security testing; solid command of OWASP Top 10 and OWASP API Security Top 10.
- Led penetration testing and vulnerability management activities end-to-end.
- Secure SDLC / DevSecOps and CI/CD security.
- AWS and/or Azure security, including cloud architecture and control reviews.
- Strong communication, stakeholder management, and technical leadership.

Preferred

- SaaS, product, or cloud-based environment experience; security automation.
- Experience securing AI/LLM-enabled applications or establishing AI governance (e.g., ISO/IEC 42001, NIST AI RMF, OWASP LLM Top 10).
- Certifications: CISSP, CISM, or CEH (equivalent hands-on pen-testing experience also considered).





Education Bachelor's or Master's in Computer Science, Cybersecurity, IT, Engineering, or related – or equivalent experience plus recognized certifications.

Security and compliance with statutory requirements in the countries in which we operate is essential for DNV. Background checks will be conducted on all final candidates as part of the offer process, in accordance with applicable country-specific laws and practices.

Benefits

Please note that some benefits may vary depending on location, business area, and employment terms. Please confirm with your recruiter.

Profit Share

You’ll be part of our global profit share scheme that means we all share in our success as a business. If we profit, so do you. This will be part of our Total Compensation approach each year and depends on our year-end results.

Professional Development

We believe in the 70/20/10 learning model, where 70% of your learning comes from performing your everyday tasks and working on different projects, current areas and initiatives to gain new skills. 20% from working with others and mentoring and the rest from formal education.

Hybrid Work Model

We work in a hybrid model (three days from the office) and have flexible starting hours. This means you can fit your work and life together in a way that works for you.

Global Opportunities

We support you in exploring different career opportunities or shifting between teams, business areas, or geographies, so that you can shape your career according to what you find motivating.

Modern Office in Pune

Our office in Pune has a modern look and feel and you’ll find zones for both focused work and team integration. Sit/stand desks, high-quality adjustable chairs and balance balls are just a few examples of what ergonomic office means at DNV.

Integration Events

Depending on where you are located, you’ll have the opportunity to participate in offsite meetings as well as different initiatives and fun events at the office. We believe that a well-integrated team is a well-functioning team.

Diversity, Equity and Inclusion

At DNV, our commitment to Diversity, Equity, and Inclusion is not only an ethical choice, but also a business decision. Diversity, fairness, and a sense of belonging are a source of strength for our people, our business, and our customers, and help us to deliver on our purpose, vision, and values.

about DEI

Working here

Since 1864 we’ve been dedicated to safeguarding life, property and the environment. Today we remain at the forefront of new technologies and techniques to help our customers transform for a more sustainable future. At DNV you can expect to deliver career and industry defining work. You’ll be given the time to build your network, the resources to support your development, and the freedom to satisfy your curiosity and desire to learn.

about Working here

📌 Senior Cybersecurity Lead Analyst (Chennai)
🏢 DNV
📍 Chennai