5 days ago
Bengaluru, IndiaSenior
Responsibilities
- Shape the AI Platform security architecture and own substantial security components end to end.
- Design and build identity, authorization, delegated-access, policy-enforcement, tenant-isolation, and permission controls for AI systems.
- Secure retrieval, tool use, and execution against prompt injection, unauthorized actions, data leakage, and other AI-specific threats.
- Create risk-based approval gates, isolation, execution limits, recovery mechanisms, audit capabilities, and monitoring.
- Conduct threat modeling and adversarial testing, translating findings into reusable platform controls and secure defaults.
- Collaborate with cloud platform, security, compliance, and product engineering teams to integrate practical security controls.
Requirements
- Strong software engineering experience designing, building, and operating secure production systems in Python, TypeScript, or a similar language.
- At least 5 years of software engineering experience securing cloud, distributed, or platform services, including authentication, authorization, policy enforcement, and multi-tenant isolation.
- Practical experience with threat modeling, application security testing, and converting identified risks into engineering controls.
- Experience designing or building systems using LLMs, retrieval-augmented generation, or agents, with knowledge of their security failure modes.
- Experience building reusable platform controls, APIs, or shared services for multiple engineering teams.
- Ability to balance security, usability, and operational complexity and communicate security decisions across technical and business stakeholders.
- Undergraduate, Master’s degree, or PhD in Computer Science, Machine Learning, Data Science, Artificial Intelligence, or a related discipline.
- Preferred experience includes multi-tenant enterprise SaaS, permission-aware retrieval, tool-calling or workflow automation, AI adversarial testing, sandboxing untrusted files or code, MCP or similar protocols, and content-centric platforms.
Benefits
- Flexible work arrangement: remote, hybrid, or based at an Esko location.
- Worldwide locations are considered.
