3 days ago
Hyderābād, IndiaStaff+
Responsibilities
- Apply and mature enterprise AI security architecture principles, standards, reference architectures, and guardrails.
- Design reusable security patterns for generative AI, copilots, RAG, model and inference APIs, autonomous or agentic AI, and enterprise AI platforms.
- Lead security architecture assessments across cloud, SaaS, API, data, application, and enterprise technology environments.
- Perform AI threat modeling using MITRE ATLAS and OWASP guidance and translate threats into controls and engineering requirements.
- Define and validate controls for identities, service accounts, secrets, APIs, prompts, training and retrieval data, outputs, plugins, tools, and third-party AI services.
- Assess risks including prompt injection, data poisoning, sensitive information disclosure, insecure tool interaction, excessive agency, model manipulation, and AI supply-chain compromise.
- Contribute to automation for architecture reviews, threat modeling, vulnerability assessment, control validation, and security testing.
- Document architecture decisions, risks, trade-offs, and recommendations for technical teams and senior stakeholders.
- Create implementation guidance and enablement to help engineering teams adopt approved AI security patterns.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline, or equivalent relevant experience.
- 6+ years of experience in the cybersecurity industry, including security architecture experience across on-premises and hybrid environments.
- Strong experience in cybersecurity, security architecture, cloud security, application security, or enterprise architecture and delivery of complex security initiatives.
- Practical knowledge of large language models, RAG, vector databases, embeddings, model gateways, AI agents, orchestration frameworks, managed AI services, and model or inference APIs.
- Strong foundation in identity and access management, application and API security, cloud security, data protection, secrets and key management, DevSecOps, and software supply-chain security.
- Knowledge of OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI Risk Management Framework, and Zero Trust principles.
- Experience designing or reviewing enterprise architectures on AWS, Microsoft Azure, or Google Cloud Platform.
- Preferred qualifications include experience with Amazon Bedrock, Azure OpenAI, Microsoft Copilot, AI red teaming, adversarial testing, prompt-injection testing, AI vulnerability management, AI governance, ISO/IEC 42001, automated guardrails, and financial-services cybersecurity or risk management.
- Ability to translate technical risks into architecture requirements and guidance, influence technical stakeholders, facilitate architecture decisions, and communicate effectively.
Benefits
- Flexible work arrangement with the option to work from home or from Regional Engagement Hubs in Hyderabad, Bengaluru, Pune, Kolkata, or Delhi/NCR.
- Occasional commuting or travel to Hyderabad or a Regional Engagement Hub may be required for in-person meetings, training, and culture events.
- Work timing is 2:00 PM–11:00 PM IST.
Tech Stack
Categories
About Synchrony
Synchrony (NYSE: SYF) provides consumer financing and payments solutions—such as private-label and co-branded credit cards, installment loans, and promotional financing—distributed through retailer and healthcare partnerships. It also operates Synchrony Bank, an online bank offering savings products and CDs. Headquartered in Stamford, Connecticut, the company was spun out of GE’s retail finance business in 2014 and serves millions of U.S. consumers and hundreds of thousands of small and midsize businesses.