Lead AppSec Engineer

Overview

Lead application security strategy across web, mobile, API, data, and AI-powered products. Act as a senior technical authority, embedding security throughout the software development lifecycle.

What you'll do

• Define AppSec standards, secure-by-default patterns, and a strategic roadmap.
• Lead threat-modelling sessions for critical services and AI/ML pipelines.
• Conduct AI red teaming and adversarial testing of LLM-powered and agentic features.
• Automate SAST, SCA, IaC, DAST/API, container, and secrets scanning.
• Harden GitHub Actions and Jenkins pipelines with least privilege and policy-as-code.
• Lead vulnerability management, application testing, and software supply-chain security.
• Mentor developers and AppSec engineers while tracking security metrics.

What you'll need

• 8+ years in security engineering, DevSecOps, automation, or application vulnerability management.
• Bachelor’s or Master’s degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience.
• Experience with threat modelling and security architecture reviews.
• Experience red-teaming AI/LLM systems or applied knowledge of AI/ML security.
• Advanced scripting skills in Python, Bash, or similar languages.
• Hands-on experience with SAST, DAST, ASPM, secrets scanning, and vulnerability management tools.
• Familiarity with cloud, infrastructure-as-code, CI/CD, and modern application architectures.

Nice to have

• OSCP, GCSA, GIAC, AWS Security, or similar certifications.
• AI security credentials or research, including AI red-teaming work or OWASP LLM Top 10 contributions.

Details

• Location: Bengaluru, India.
• Hybrid flexible working.