21 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Perform security architecture reviews, design reviews, threat modeling, and risk assessments for applications, APIs, cloud services, and AI-enabled solutions.
- Conduct security assessments for AI applications, AI agents, LLM integrations, RAG solutions, and AI platforms.
- Partner with product and engineering teams to identify risks and provide remediation guidance.
- Develop security tools, integrations, automations, and proof-of-concepts.
- Build and maintain security automation integrated with CI/CD pipelines, security platforms, and engineering workflows.
- Embed security requirements into the Software Development Lifecycle and support secure-by-design and secure-by-default initiatives.
- Review SAST, SCA, container, infrastructure, cloud, and AI security findings and support remediation.
- Contribute to AI Security, Product Security, and Secure Development standards and best practices.
- Perform adversarial testing, coordinate penetration testing, and validate security controls.
- Research emerging technologies, AI platforms, and security solutions.
- Develop security metrics, dashboards, and reporting for security posture and risk visibility.
- Mentor engineers and security champions and promote security best practices across development teams.
Requirements
- Bachelor’s or master’s degree in Computer Science, Engineering, Cyber Security, Artificial Intelligence, or a related field.
- Seven to ten years of experience in Security Engineering, Application Security, Product Security, Software Engineering, or DevSecOps roles.
- At least three years of experience conducting security reviews, threat modeling, architecture assessments, or product security activities.
- Experience with cloud platforms such as Azure, AWS, or GCP and with modern applications, APIs, microservices, containers, and cloud-native solutions.
- Experience developing automation, integrations, internal tooling, or engineering utilities using languages such as Python, Java, C#, or Go.
- Knowledge of application security, product security, AI security, secure software development, cloud security, LLMs, AI agents, prompt injection, model security, AI governance, and adversarial testing.
- Familiarity with DevSecOps, CI/CD pipelines, GitHub, Infrastructure-as-Code, and security automation.
- Experience with SAST, SCA, API Security, Container Security, Secrets Detection, and Vulnerability Management technologies.
- Experience with source control, CI/CD, issue tracking, and Agile development practices.
- Preferred qualifications include AI Security, AI Governance, AI Risk Management, AI Red Teaming, Developer Security Platforms, ASPM, GitHub Advanced Security, CodeQL, Container Security, Cloud Security solutions, security integrations, workflow automation, and relevant security certifications.
- Financial services experience is a plus.
Benefits
- Unlimited vacation subject to local regulations and business priorities.
- Hybrid working arrangements and paid time off for voting, bereavement, and sick leave.
- Employee Assistance Program, Wellbeing Champions, Gather Groups, and well-being events.
- Medical, life, and disability insurance, retirement plans, lifestyle benefits, and other location-dependent benefits.
- Paid time off for volunteering and donation-matching opportunities.
- Access to inclusion communities and employee resource groups.
- Online learning and accredited courses through the Skills & Career Navigator tool.
- Participation in the Finastra Celebrates global recognition program and regular employee surveys.
- The position is located in Bangalore and follows a hybrid work arrangement.
About Finastra
Finastra builds banking software for financial institutions, spanning core banking, lending, payments, and treasury, delivered on-premises and via cloud APIs. It sells licensed and SaaS products and an open platform (FusionFabric.cloud) used by over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries. Founded in 2017 and headquartered in Paddington, London, it is privately held.