Overview
Own the security of Ema's AI agents and the cloud platform they run on, building controls for autonomous agents that act on sensitive enterprise data across multi-tenant cloud, on-prem and air-gapped deployments.
What you'll do
- Threat model new AI agent features before launch, including direct and indirect prompt injection, jailbreaks, data exfiltration through agent outputs, and over-privileged tool use
- Design guardrails for agentic workflows: least-privilege tool and connector scopes, human-in-the-loop approvals for high-risk actions, and output filtering
- Enforce tenant and data isolation across retrieval (RAG), context stores, and model calls
- Secure the AI supply chain: model and provider vetting, third-party MCP servers and connectors, prompt and config versioning
- Run AI red-team exercises and build automated adversarial tests (prompt injection suites) into CI
- Set security baselines for Kubernetes and cloud infrastructure: RBAC, network policies, workload identity, secrets management, per-tenant network isolation
- Secure CI/CD with IaC scanning, SAST and dependency scanning, and policy-as-code guardrails
- Contribute AI-aware detection: logging prompts, tool calls and agent actions, and alerting on anomalous agent behavior
- Partner with the Security & Compliance Lead on technical controls and evidence for SOC 2 Type II, ISO 27001, HIPAA and ISO 42001, plus the NIST AI RMF
What you'll need
- 5+ years in cloud security, application security, or DevSecOps (GCP/Azure preferred)
- Deep hands-on Kubernetes and cloud security experience
- Security automation with IaC (Terraform/Helm) and Python or Bash
- A working understanding of LLM application risks (OWASP Top 10 for LLM Applications) and how agentic systems fail
- Comfortable influencing engineers without formal authority
Nice to have
- Hands-on experience securing LLM, RAG, or agentic systems in production
- AI red teaming, or familiarity with MITRE ATLAS
- CNAPP/CSPM tooling, SIEM/detection engineering
- Contributions to AI security research, open-source tools, or CTFs
Details
- Location: Bengaluru, India
- Reports to the Security & Compliance Lead and partners directly with Engineering and Product leadership
Read the full description and apply on the company’s own careers page.