AI Security Engineer

Five Exceptions Software Solutions; Indore District; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Five Exceptions Software Solutions in Indore (Work from Office) seeks an AppSec / AI Security Engineer to embed security into the software development lifecycle. You will own automated scanning, code provenance, and governance processes to ensure AI-generated code meets security standards.

You will design and implement security automation within pipelines, manage findings, and help shape AI tool governance across projects. Strong SAST/DAST/SCA knowledge is essential.

Qualifications

• Experience implementing automated security scanning, policy enforcement, and security gates beyond using existing tools.
• Knowledge of SAST, SCA, DAST, and IaC security scanning practices and tools.
• Hands-on cloud security with AWS and/or Azure.
• Ability to design, build, and own security automation and governance solutions from the ground up.
• Strong security judgment balancing risk reduction and developer productivity.

Responsibilities

• Build and integrate security controls into CI/CD pipelines with automated scanning for source code, dependencies, secrets, and IaC gates.
• Design and implement code provenance tracking to identify AI-generated code and capture reviewer approvals.
• Establish structured code review workflows incorporating security scans and provenance for validation.
• Optimize security tooling to minimize false positives and improve developer adoption.
• Investigate, prioritize, and manage security findings through remediation and documentation processes.
• Contribute to AI governance by defining secure practices for AI tool usage and controls for AI-generated code.
• Conduct independent security assessments of internal, third-party, and vendor-supplied code.

Skills

Automated scanning

SAST

SCA

DAST

IaC security

AWS

Azure

Security automation

Code provenance

Governance

Education

Bachelor's degree in Computer Science or related field

Tools

Semgrep

CodeQL

Snyk

Gitleaks

TruffleHog

Prowler

Trivy

Job description

AppSec / AI Security Engineer

Were embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards. If youre a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

Employment Type: Full-time

Location: Indore (Work from Office)

Key Responsibilities

• Build and integrate robust security controls into CI/CD pipelines, enabling automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC), with security gates enforced on every merge.
• Design and implement code provenance tracking to identify AI-generated code, record the AI models used, and capture reviewer approvals throughout the development lifecycle.
• Establish structured code review workflows that incorporate technical specifications, security scan results, and code provenance for comprehensive security validation.
• Optimize security scanning tools and workflows to minimize false positives, improve signal quality, and drive greater developer adoption.
• Investigate, prioritize, and manage security findings through established remediation, tracking, and documentation processes.
• Contribute to AI governance standards by defining secure practices for AI tool usage and establishing controls for AI-generated code.
• Conduct independent security assessments of internally developed, third-party, and vendor-supplied code to ensure alignment with organizational security standards and requirements.

Required Skills & Experience

• Demonstrated experience implementing automated security scanning, policy enforcement, and security gates rather than simply operating existing tools.
• Strong knowledge of SAST, SCA, secret scanning, DAST, and Infrastructure as Code (IaC) security scanning practices and tools.
• Strong understanding of cloud infrastructure, with hands‑on or working knowledge of AWS and Azure preferred.
• Ability to design, build, and own security automation and governance solutions from the ground up.
• Strong security judgment with the ability to balance risk reduction and developer productivity by minimizing unnecessary alerts and false positives.
• Excellent communication skills, with the ability to translate complex security risks into clear, concise, and business-friendly language.
• Strong analytical and problem-solving skills, with the ability to independently assess security risks across internal, third-party, and external codebases.

Preferred Qualifications

• Hands‑on experience securing AI-generated code, with knowledge of LLM security risks, prompt injection, code provenance, and AI governance.
• Hands‑on experience with security tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar solutions.
• AWS certification, preferably Solutions Architect Associate, or willingness to obtain the certification within 90 days.
• Security certifications such as OSCP, GWAPT, CSSLP, or equivalent are preferred.
• Experience developing custom security detection rules and policies, including custom Semgrep rules.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.