Lead AI Security & DevSecOps

About the role

Lead the security strategy for applications and AI systems, ensuring secure development, governance, and compliance across a diverse technology stack.

Key responsibilities

• Own and enforce secure development standards, conduct manual and automated code reviews, and define release gates for security approval.
• Review AI models, prompts, and data pipelines for privacy, misuse, and prompt‑injection risks, and enforce controls to prevent data exfiltration.
• Integrate security tooling into CI/CD pipelines (Jenkins, GitHub Enterprise) and promote shift‑left practices.
• Secure data persistence and messaging layers (RabbitMQ, Kafka, Cassandra, MongoDB, Snowflake) with encryption and access controls.
• Support compliance frameworks (SOC 2, ISO 27001) and produce audit‑ready artifacts.
• Mentor engineers, act as escalation point, and provide executive reporting on security posture.

Required profile

• 8+ years in application security, DevSecOps, or secure software development.
• Hands‑on experience reviewing code in modern languages and securing APIs, microservices, and cloud platforms (Azure, AWS).
• Proven ability to balance security rigor with delivery velocity in a customer‑facing environment.

Required skills

• Java, React, Node.js, Python (Django, FastAPI), JavaScript, HTML, C++.
• CI/CD tools: Jenkins, GitHub Enterprise; security tools: SAST, DAST, dependency, container, and secrets scanning.
• Cloud platforms: Azure, AWS.
• Messaging and storage: RabbitMQ, Kafka, Cassandra, MongoDB, Snowflake.
• AI security: prompt‑injection mitigation, data‑leakage detection, AI governance.
• Compliance frameworks: SOC 2, ISO 27001.