Title: Head of Security
Bangalore, India Remote
We want a hands-on security leader who has been in the room when things broke and led the response. You'll own Scrut's application security, security operations, and corporate security, and be the person customers and leadership trust when something goes wrong.
Application security
Own the secure SDLC: threat modelling, security design reviews, and secure coding standards.
Build security tooling into CI/CD: SAST, DAST, SCA, secrets scanning, and IaC scanning, with fixes that engineers can actually act on.
Own vulnerability management for the product: triage, remediation SLAs, pen tests, and a bug bounty or responsible disclosure program.
Secure a multi-tenant SaaS platform, including tenant isolation, authentication and authorization, API security, and data protection.
Secure AI and LLM features against prompt injection, data leakage, and model and vendor risk.
Work as a partner to engineering leaders so security speeds teams up instead of blocking them.
Support SOC 2 and ISO 27001 controls and customer security reviews, working with the GRC team.
Security operations and incident response
You'll lead the in-house SOC, manage the MDR relationship, scope, and SLAs, and keep raising the bar on 24x7 monitoring, alert triage, escalation, and response quality.
Own the incident response program: playbooks, severity levels, on-call, war rooms, and blameless post-incident reviews that lead to real fixes.
Lead live incidents from detection through containment, eradication, recovery, and customer and regulatory notification.
Own threat intelligence and threat hunting for our cloud, corporate, and product environments.
Corporate security
~ Secure corporate IT: identity and SSO, MFA, device management,



endpoint protection, and email security.

6+ years in security.

- You've personally led response to real, high-severity incidents (breaches, ransomware, account takeovers, cloud compromises, or major vulnerabilities like Log4Shell) and can walk us through what happened, what you decided, and what you changed afterwards.
- Experience leading an in-house SOC team and managing an MDR or MSSP provider, including holding them to SLAs, with deep familiarity with SIEM, SOAR, EDR/XDR, and cloud-native detection (AWS GuardDuty, CloudTrail, Security Hub, or equivalents).
- Solid cloud security skills, ideally AWS.
- Experience securing corporate IT and identity.
- Calm under pressure, a clear communicator during incidents, and able to brief both engineers and executives.

Experience at a B2B SaaS, security, or compliance company.
Digital forensics experience.
Experience securing AI/LLM products
Competitive pay, great advantages, and policies that respect your time and energy
We're building for a global market - your work scales beyond borders
Scrut Automation is an information security and compliance monitoring platform aimed at helping small and medium cloud-native enterprises develop and maintain a robust security posture and comply with various infosec standards such as SOC 2, ISO 27001, GDPR, and the like with ease. With the help of the Scrut platform, customers reduce their manual effort for security and compliance tasks by 70% and build real-time visibility of their security posture. Founded by IIT/ISB/McKinsey alumni, the founding team has over 15 years of combined Infosec experience. Scrut is backed by Lightspeed Ventures, MassMutual Ventures and Endiya Partners, along with prominent angels from the global SaaS community.

📌 Head of Security - REMOTE (India)
🏢 Scrut Automation
📍 India