Ozyn.
AI is an AI assistant that works across people’s email, calendar, documents and messages, and takes actions on their behalf. People will only let an assistant into their lives if they trust it completely. Your job is to make Ozyn worth that trust.

About the role
You’ll be our first security hire, working directly with the CEO and the engineering team. You won’t be writing policies from the sidelines. You’ll review code, change the architecture, build the protections, and own security and privacy for Ozyn end to end. What you’ll do
• Secure the agent: design defences against prompt injection, unsafe tool use and data leakage, so that content in a user’s email or documents can never make Ozyn act against them.
• Protect connected accounts: own how OAuth tokens and permissions for Gmail, Google Calendar, Outlook and other integrations are requested, stored, scoped, rotated and revoked.
• Keep user data separate: guarantee one user’s data can never reach another user, across databases, caches, vector stores, logs and model prompts.
• Encrypt and minimise: set up encryption at rest and in transit, key management and secrets handling. Keep personal data out of places it doesn’t need to be.
• Build privacy into the product: data minimisation, retention and deletion, consent, and handling users’ requests to see or delete their data, in line with India’s DPDP Act and global norms.
• Review and test: threat-model new features, review pull requests, run security testing, and set up security checks in CI/CD.
• Detect and respond:



set up logging, monitoring and alerting, an audit trail of every action the agent takes, and an incident response plan.
• Prepare for enterprise buyers: lead our path to SOC 2 or ISO 27001 and answer customer security questionnaires.
• Raise the bar: teach the engineering team secure defaults so security doesn’t depend on one person. What we’re looking for
• 4–8 years in application, cloud or product security, with real hands-on engineering. You can read and write production code.
• Experience securing a product that handles sensitive personal data, ideally as an early or sole security owner at a startup.
• Robust grasp of OAuth, identity and access management, cloud security (AWS or GCP), secrets and key management, and secure architecture.
• Practical understanding of how LLM applications fail: prompt injection, unsafe tool calling, data leakage through context and logs.
• Sound judgement: you know which risks matter now and which can wait, and you can explain trade-offs clearly to founders and engineers. Bonus
• Bug bounty findings, published security advisories, talks, write-ups or open-source security tools.
• Experience taking a company through SOC 2 or ISO 27001.
• Familiarity with India’s DPDP Act, GDPR or similar privacy rules. Why join
• Define security for an AI assistant from day one, as the person responsible for it.
• Work directly with the CEO in a small, fast-moving team.
• Grow into leading security as Ozyn scales.

📌 Founding Security Engineer (Bengaluru)
🏢 Tipstat®
📍 Bengaluru