AI Product Security Engineer

Techolution LLC; India; A distancia; INR 1.800.000 - 3.200.000; Jornada completa

Descripción de la vacante

Techolution LLC seeks a Senior AI Product Security Engineer to secure enterprise apps and AI-powered products across multiple teams. You will lead hands-on security testing for web, API, cloud, and Kubernetes environments while focusing on AI/LLM security, RAG systems, and AI agents.

In this remote, full-time role, you will identify risks, drive remediation, integrate security into SDLC/CI/CD, and communicate complex vulnerabilities to stakeholders.

Formación

• 2+ years of hands-on experience in Product Security, Application Security, or Security Engineering.
• Strong experience with Web/API Security, OWASP Top 10, vulnerability assessment, and threat modeling.
• Proven ability to discover and validate real-world vulnerabilities, beyond automated scanners.
• Experience with Burp Suite/ZAP, source-code security review, and root-cause analysis.
• Experience securing cloud, Kubernetes/GKE, IAM, containers, and CI/CD environments.
• Experience with SAST, DAST, and SCA within the SDLC.
• Practical experience with AI/LLM security, RAG security, or AI agent security.
• Ability to prioritize security risks and drive vulnerabilities through remediation and closure.
• Strong communication and stakeholder-management skills.

Responsabilidades

• Own security assessments across enterprise applications, products, repositories, and engineering teams.
• Perform hands-on Web, API, cloud, and Kubernetes security testing, including vulnerability discovery and validation.
• Conduct threat modeling and security assessments for AI/LLM applications, RAG systems, and AI agents.
• Identify AI-specific risks such as prompt injection, data leakage, RAG poisoning, excessive permissions, and unsafe tool calls.
• Identify and prioritize vulnerabilities based on exploitability, business impact, and risk.
• Work directly with engineering teams to drive remediation, retesting, and closure.
• Integrate security into SDLC and CI/CD pipelines using SAST, DAST, SCA, secrets detection, and security gates.
• Establish scalable security practices across multiple products and teams.
• Communicate technical vulnerabilities, business impact, and remediation requirements to engineering and business stakeholders.

Conocimientos

Product Security

Web/API Security

Threat Modeling

AI/LLM Security

Security Testing

Remediation

Stakeholder Communication

Herramientas

Burp Suite

ZAP

Source-code security review

Descripción del empleo

We are looking for a Senior AI Product Security Engineer to secure enterprise applications and AI-powered products across multiple engineering teams and repositories.

The role requires strong hands-on Product/Application Security expertise, combined with practical experience securing AI/LLM applications, RAG systems, and AI agents, Cloud. You will identify and prioritize security risks, drive remediation, and help build scalable security practices across products.

Title : Senior AI Product Security Engineer

Location :Remote Work

Employment Type: Full-time

Exp Range : 2+ Years

Key Responsibilities:

• Own security assessments across enterprise applications, products, repositories, and engineering teams.
• Perform hands-on Web, API, cloud, and Kubernetes security testing, including vulnerability discovery and validation.
• Conduct threat modeling and security assessments for AI/LLM applications, RAG systems, and AI agents.
• Identify AI-specific risks such as prompt injection, data leakage, RAG poisoning, excessive permissions, and unsafe tool calls.
• Identify and prioritize vulnerabilities based on exploitability, business impact, and risk.
• Work directly with engineering teams to drive remediation, retesting, and closure.
• Integrate security into SDLC and CI/CD pipelines using SAST, DAST, SCA, secrets detection, and security gates.
• Establish scalable security practices across multiple products and teams.
• Communicate technical vulnerabilities, business impact, and remediation requirements to engineering and business stakeholders.

Qualifications

• 2+ years of hands-on experience in Product Security, Application Security, or Security Engineering.
• Strong experience with Web/API Security, OWASP Top 10, vulnerability assessment, and threat modeling.
• Proven ability to discover and validate real-world vulnerabilities, beyond automated scanners.
• Experience with Burp Suite/ZAP, source-code security review, and root-cause analysis.
• Experience securing cloud, Kubernetes/GKE, IAM, containers, and CI/CD environments.
• Experience with SAST, DAST, and SCA within the SDLC.
• Practical experience with AI/LLM security, RAG security, or AI agent security.
• Ability to prioritize security risks and drive vulnerabilities through remediation and closure.
• Strong communication and stakeholder-management skills.

Nice to Have

• GCP/GKE, Vertex AI, Gemini, or Model Armor experience.
• Experience with AI red teaming or LLM security testing.
• OSCP, OSWE, GIAC, CREST, or equivalent certification.