OverviewTD SYNNEX(NYSE: SNX) is the world's largest IT distributor, and we areaccelerating AI adoption across Azure AI Foundry, AWS Bedrock,Copilot Studio, Databricks, and self-hosted agent environments. Oursecurity philosophy is distinctive: rather than slowing innovationwith pre-approval gatekeeping, we operate a runtime-first,default-allow security posture - every AI interaction isintercepted, analyzed, and enforced at the moment of execution. Inour architecture, the traditional network perimeter no longerdefines the defensive boundary: the AI agent is theperimeter.The AI & Cloud Security team ischartered to make that vision operational. We are seeking seniortechnical owner of the AI security runtime control plane anddetection fabric. You will build and integrate the inlineenforcement pipeline (AI gateway → runtime data protection →intent-based enforcement), tune the policies that keep it fast andlow-friction, and serve as the final escalation point for the mostcomplex AI and cloud security incidents. You will also helpimplement and participate in operation of a closed-loop defensivesystem in which continuous red-team findings automatically improveruntime policies, detection logic, and SOC threat models. You joina team of two AI & Cloud Security Architects and will be theengineering force that turns strategy into operating controls -across a multi-cloud estate (Azure, AWS,GCP).This role involves collaborating withcross-functional teams to ensure the security of AI and cloudenvironments, AI applications and infrastructure, addressingpotential threats, and maintaining compliance with regulatorystandards. The ideal candidate will have a strong background in AItechnologies and their implementation as well as cloud security,security principles and cybersecurity best practices. The abilityto develop automation in both AI and cloud environments withinfrastructure as code (Ia C) or policy as code principles isrequired. The engineer will report to AI & Cloud Securityleadership and have strong working relationships with IT andapplication developmentleadership.Responsibilities Integration- build and own the AI runtime control plane. Engineer,deploy and operate the inline enforcement pipeline for AI traffic:an AI gateway chained with runtime data-protection and intent-basedenforcement platforms, fronting LLMs, tools, and MCP servers acrossAzure AI Foundry, AWS Bedrock, GCP Vertex, Copilot Studio,Databricks, and self-hostedenvironments. Harden the gateway layerfor resilience: configure buffering and overloadmanagement, enforcement timeouts on external-processing filters,layered global/local rate limiting, and prompt-truncation filtersto defend against token-exhaustion and "reasoning overload"denial-of-service attacks. Integratethe wider AI security ecosystem into one coherent system:onboard AI asset-intelligence context (agent inventory, ownership,blast radius) into enforcement decisions; connect model-securityand supply-chain telemetry and continuous red-team signals intoSIEM correlation and SOC workflows; stream unified AI detections,decision logs, and policy events for forensics andaudit. Policy tuning - enforce withoutfriction. Author and calibrate runtime policies:prompt-injection and jailbreak prevention, PII detection/redactionand data masking, intent-based filtering, tool-call validation, MCPaccess control, and agent permission boundaries (including "lethaltrifecta" prevention for low-code agents). Balance detection versushard-block modes to minimize false positives, and tune per AIarchetype - embedded Saa S copilots, democratized low-code agents,homegrown agentic pipelines, device-based coding agents, andhomegrown models. Operate the closedloop:



translate continuous adversarial-testing findingsinto runtime policy updates, new detection content, and guardrailtuning, then validate remediation through re-testing - so defensesevolve with attackers rather than remainingstatic. L3 coverage - final escalationfor the AI Security toolset. Lead deep investigations ofAI-specific attacks (direct/indirect prompt injection, RAGpoisoning, memory poisoning, agent hijacking, MCP/tool abuse, modelmanipulation, AI-driven data exfiltration), perform decision-replayforensics and root-cause analysis, drive automated containment(agent quarantine, permission revocation, kill switch) toward oursub-15-minute containment objectives, and mentor L2 analysts.Troubleshoot any incidents related topolicies. Evaluate and pilot AIsecurity vendors: run structured proofs-of-concept forruntime defense, AIDR, AI-SPM, AI red-teaming, and model-securityplatforms, and provide technical recommendations as the stackmatures.Engineer and operate cloud securitycontrols across Azure, AWS, and GCP - posture policies, detectiontuning, and remediation of misconfigurations, excessiveentitlements, and workload risks, including the Kubernetes estates(AKS/EKS) hosting the AI gateway layer.Designand maintain secure multi-cloud patterns consistent with companyapproved architectural blueprint as well as zero-trust agentaccess: least-privilege identity for humans, service principals,and agents (Entra ID, AWS IAM, GCP IAM, PAM), conditional accessfor AI platforms, and least-privilege OAuth scopes for agentintegrations.Embed security into Dev Sec Ops:Infrastructure-as-Code (Terraform) scanning, container/Kubernetessecurity, secrets management, CI/CD hardening, and pre-deploymentAI security testing gates in Azure Dev Ops/Git HubActions.Support cloud workload vulnerabilitymanagement (VMs, containers, registries, serverless) withrisk-based prioritization, and act as escalation point forinvestigations spanning cloud, identity, endpoint, and AItelemetry. CriticalSkillsProven ability tointegrate enterprise security platforms into onesystem: API/connector engineering, log ingestion andnormalization, SIEM/SOAR integration, and multi-vendor inlinearchitectures.Strong AI/Gen AIsecurity depth: LLM and agentic-AI threat models (OWASPLLM Top 10 2025, OWASP Agentic Top 10, MITRE ATLAS),prompt-injection/jailbreak defense, RAG security, AI guardrails andgateways, MCP security, and the AI-SPM/AIDR/AI-red-teaming toolingcategories. Hands-on experience with AI securitytechnologies is highly valued; so is experience withopen-source AI securitytooling. Multi-cloud securityengineering across Azure, AWS, and GCP: CSPM/CWPP/CNAPPoperations, cloud identity and entitlements, Kubernetes andcontainer security, and secure architecture (hub-and-spoke,segmentation, baseline protection).Proficiencyin KQL, Power Shell, and Python for automation,detection engineering, and tooling; Dev Sec Ops and Ia C security(Terraform); CI/CD pipeline integration.Apragmatic, enablement-first security mindset: comfortable with adefault-allow culture where controls must be fast, precise, andlow-friction rather than restrictive.ExcellentEnglish communication - clear runbooks, integration documentation,and the ability to explain trade-offs to architects, engineers,



andleadership across a globally distributed team and multiple timezones.Excellent communication andcollaboration skillsAbility to workeffectively in a fast-paced, dynamicenvironment. ExperienceSignificanthands-on engineering responsibility, including in cloud security(Azure/AWS/GCP) and demonstrable experience securing or operatingAI/ML or LLM-based systems (or strongly evidenced, rapidly acquiredhands-on AI-security capability).Proven trackrecord deploying, integrating, and tuning securityplatforms in complex enterprise environments and servingas an L3 / senior escalation point; experience running vendorproofs-of-concept is a plus.Experienceoperating security tooling in Kubernetes-based environments(AKS/EKS) and integrating open-source components into enterprisestacks is an advantage.Relevant certificationsstrengthen an application (none individually required): CISSP,CCSP, SC-100, AZ-500, AWS Certified Security - Specialty, GoogleProfessional Cloud Security Engineer; AI red-team or AI-securitycredentials are a plus.Bachelor's degree inComputer Science, Cybersecurity, Information Systems, or equivalentpracticalexperience. WorkingconditionsWilling to worknonstandard business hours for projects, business impact issues andincident response.Some travelrequired.Flexible remotework. At Tech Data, a TD SYNNEXCompany, our values guide everything we do: Together, We Own It, WeDare to Go, We Grow and Win, and above all, We Do the Right Thing.These principles shape how we work with each other, our partners,and our communities as we drive innovation and create lastingimpact.What's In It ForYou? ElectiveBenefits: Our programs are tailored to your country tobest accommodate your lifestyle. GrowYour Career: Accelerate your path to success (and keep upwith the future) with formal programs on leadership andprofessional development, and many more on-demandcourses. Elevate Your PersonalWell-Being: Boost your financial, physical, and mentalwell-being through seminars, events, and our global LifeEmpowerment AssistanceProgram. Diversity, Equity &Inclusion;: It's not just a phrase to us; valuing everyvoice is how we succeed. Join us in celebrating our globaldiversity through inclusive education, meaningful peer-to-peerconversations, and equitable growth and developmentopportunities. Make the Most of ourGlobal Organization: Network with other new co-workerswithin your first 30 days through our onboardingprogram. Connect with YourCommunity: Participate in internal, peer-led inclusivecommunities and activities, including business resource groups,local volunteering events, and more environmental and socialinitiatives. Don'tmeet every single requirement? Apply anyway.At Tech Data, a TD SYNNEX Company,we're proud to be recognized as a great place to work and a leaderin the promotion and practice of diversity, equity and inclusion.If you're excited about working for our company and believe you'rea valuable fit for this role, we encourage you to apply. You may beexactly the person we're looking for!We are anequal opportunity employer and committed to building a diverse teamthat represents and empowers a variety of backgrounds,perspectives, and skills. All qualified applicants will receiveconsideration for employment based on merit, without regard torace, colour, religion, national origin, gender, gender identity orexpression, sexual orientation, protected veteran status,disability, genetics, age, or any other characteristic protected bylaw. To support our diversity and inclusion efforts, we may ask forvoluntary gender disclosure information. This data will be usedsolely to improve our hiring practices and ensure fair treatmentfor all candidates.

📌 Ai And Cloud Security Engineer (Chennai)
🏢 Tech Data
📍 Chennai