Senior AI Security Development Engineer

Overview

Senior AI Security Development Engineer at Finastra, reporting to the Director, Product & AI Security Engineering, responsible for enabling the secure delivery of Finastra's products, platforms, and AI initiatives by combining hands-on security engineering with security review and advisory work.

What you'll do

• Perform security architecture reviews, design reviews, threat modeling, and risk assessments for applications, APIs, cloud services, and AI-enabled solutions.
• Conduct AI security assessments for AI applications, AI agents, LLM integrations, RAG solutions, and AI platforms.
• Work directly with product and engineering teams as a trusted security partner to identify risks and provide practical remediation guidance.
• Design and develop security tools, integrations, automations, and proof-of-concepts that improve security visibility, governance, and developer experience.
• Build and maintain security automation integrated into CI/CD pipelines, security platforms, and engineering workflows.
• Support secure-by-design and secure-by-default initiatives by embedding security requirements into the Software Development Lifecycle (SDLC).
• Review security findings from SAST, SCA, container, infrastructure, cloud, and AI security assessments and support remediation efforts.
• Contribute to AI Security, Product Security, and Secure Development standards, guidelines, and best practices.
• Perform security testing activities, including adversarial testing, penetration testing coordination, and validation of security controls.
• Support security research and evaluation of emerging technologies, AI platforms, and security solutions.
• Develop security metrics, dashboards, and reporting capabilities to improve visibility into security posture and risk.
• Mentor engineers and security champions and help drive adoption of security best practices across development teams.

What you'll need

• Bachelor's or Master's degree in Computer Science, Engineering, Cyber Security, Artificial Intelligence, or a related field.
• Minimum 7-10 years of experience in Security Engineering, Application Security, Product Security, Software Engineering, or DevSecOps roles.
• Minimum 3+ years of experience conducting security reviews, threat modeling, architecture assessments, or product security activities.
• Strong understanding of Application Security, Product Security, AI Security, and Secure Software Development principles.
• Experience performing threat modeling, architecture reviews, design assessments, and risk analysis.
• Knowledge of cloud security principles and modern cloud-native architectures.
• Understanding of AI security concepts, including LLMs, AI agents, prompt injection, model security, AI governance, and adversarial testing techniques.
• Experience developing scripts, automations, integrations, and lightweight security tools using languages such as Python, Java, C#, Go, or similar.
• Familiarity with DevSecOps practices, CI/CD pipelines, GitHub, Infrastructure-as-Code, and security automation.
• Experience with security testing technologies including SAST, SCA, API Security, Container Security, Secrets Detection, and Vulnerability Management.
• Experience with cloud platforms such as Azure, AWS, or GCP.
• Experience securing modern applications, APIs, microservices, containers, and cloud-native solutions.
• Experience developing automation, integrations, internal tooling, or engineering utilities.
• Experience with source control, CI/CD, issue tracking, and Agile development practices.
• Strong analytical and problem-solving skills with the ability to communicate effectively with both technical and business stakeholders.
• Demonstrated ability to learn and adopt new technologies, security practices, and engineering methodologies.
• Ability to work independently, manage multiple priorities, and influence engineering teams in a fast-paced environment.

Nice to have

• Financial services experience.
• Experience in AI Security, AI Governance, AI Risk Management, or AI Red Teaming.
• Experience with Developer Security Platforms, ASPM, GitHub Advanced Security, CodeQL, Container Security, or Cloud Security solutions.
• Experience building security integrations, workflow automations, developer enablement capabilities, or security operational tooling.
• Relevant certifications in AI Security, Cybersecurity, Cloud Security, Security Architecture, Secure Software Development, or related domains.

Details

• Location: Bangalore.
• Role profile: approximately 50% Security Engineering and Security Reviews and 50% Security Tooling, Automation, and Capability Development, acting as a forward-deployed security partner embedded with engineering teams.
• Hybrid working arrangements are offered.