24 hours ago
Remote, India or Bengaluru, IndiaStaff+
Responsibilities
- Own the AI governance risk register and end-to-end assessment methodology across GenAI, Agentic AI, Shadow AI/Local AI, and AI Gateway/MCP domains.
- Identify and prioritize security gaps, define monitoring and guardrail requirements, and drive remediation with engineering teams.
- Lead Shadow AI governance strategy, including risk quantification and operationalization of detection and enforcement controls.
- Set security requirements for AI gateways and Model Context Protocol implementations, including configuration, access control, and governance coverage.
- Architect AI security reference patterns and serve as design authority in AI architecture reviews.
- Evaluate AI security tooling through proof-of-concept design, cost-benefit analysis, and leadership recommendations.
- Lead security architecture reviews and risk assessments across network, endpoint, cloud, and data security.
- Contribute to incident response, detection engineering, and purple team exercises.
- Partner with AI/ML, engineering, and enterprise teams; lead working groups, mentor engineers, and report AI risk posture to leadership.
Requirements
- 10+ years of security engineering or cybersecurity experience, including end-to-end ownership of a security domain or program.
- Strong working knowledge of modern AI/ML systems and associated security risks, including LLMs, generative AI, and agentic systems.
- Direct experience securing GenAI or LLM-based applications in an enterprise environment is a strong differentiator.
- Understanding of AI gateways, Model Context Protocol, CASB/SWG, DLP tooling, and Shadow AI detection and governance strategies.
- Working knowledge of network, endpoint, cloud, and data security sufficient to lead architecture reviews and risk assessments.
- Experience designing security reference architectures or serving as a design authority in complex cross-functional technical environments.
- Threat modeling experience applied to AI or novel technology stacks is preferred.
- Ability to influence senior stakeholders, communicate risk clearly, drive alignment without direct authority, and produce actionable risk documentation.
- Ability to work autonomously in a globally distributed team with regular overlap with US Pacific hours.
Benefits
- Structured hybrid work approach centered around office and remote work environments; this posting is tagged Remote.
- Benefits and perks support physical, mental, emotional, and financial health, work-life balance, and community involvement.
- Interview process may include recordings supported by BrightHire.
Categories
About Zoom
Zoom builds a cloud platform for video meetings, team chat, webinars, phone, rooms, and contact center used by businesses, schools, and public-sector organizations. It sells these collaboration and communications services as SaaS subscriptions with add-ons for events, telephony, and enterprise features, and offers developer APIs/SDKs. Founded in 2013 and headquartered in San Jose, California, Zoom Video Communications is a public company traded on Nasdaq.