Code Security Engineer | AI & Application Security

TechBaton; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

TechBaton in Bengaluru is seeking a Code Security Engineer to work on AI-powered security research and engineering initiatives.

You will review code, evaluate AI agents for vulnerability discovery, and help turn findings into deterministic CodeQL queries, contributing to secure coding practices.

Qualifications

• Strong hands-on experience in application security and secure code review.
• Experience with vulnerability analysis and threat modelling.
• Proficiency in static analysis / SAST.
• C/C++ as a core strength.
• Proficiency in C#, TypeScript, or Python.
• Ability to reason about vulnerabilities across architectures.

Responsibilities

• Review source code and static-analysis findings for security vulnerabilities.
• Evaluate and compare AI agents for vulnerability discovery, triage, severity assessment, exploit/PoC generation, and automated remediation.
• Design security experiments and analyse results across diverse codebases.
• Validate AI-generated findings and fixes using expert security judgement.
• Work with CodeQL/QL to turn AI-discovered vulnerabilities into deterministic queries and identify variants.
• Contribute to secure coding, threat modelling, and security engineering practices.

Skills

Application Security

Secure code review

Vulnerability analysis

Threat modelling

Static analysis / SAST

C/C++

C#

TypeScript

Python

Unfamiliar code reasoning

Tools

CodeQL/QL

Job description

TechBaton is an AI research, training, and consulting organization helping enterprises and institutions turn AI into practical business outcomes. We work across AI strategy, engineering, research, and education—and increasingly at the intersection of AI and cybersecurity.

We are building a team that wants to work on real security problems at the frontier of AI-driven software security.

The Role

About TechBaton

TechBaton is an AI research, training, and consulting organization helping enterprises and institutions turn AI into practical business outcomes. We work across AI strategy, engineering, research, and education—and increasingly at the intersection of AI and cybersecurity.

We are building a team that wants to work on real security problems at the frontier of AI-driven software security.

We are looking for a Code Security Engineer to work on our AI-powered security research and engineering initiatives.

You will work with a hybrid platform combining CodeQL, static analysis, and LLM-based security research agents to understand how effectively AI can discover, validate, prioritize, and remediate vulnerabilities in real-world code.

Your work will include:

• Reviewing source code and static-analysis findings for security vulnerabilities.
• Evaluating and comparing AI agents for vulnerability discovery, triage, severity assessment, exploit/PoC generation, and automated remediation.
• Designing security experiments and analysing results across diverse codebases.
• Validating AI-generated findings and fixes using expert security judgement.
• Working with CodeQL/QL to turn AI-discovered vulnerabilities into deterministic queries and identify variants.
• Contributing to secure coding, threat modelling, and security engineering practices.

What we’re looking for

We’re particularly interested in engineers with strong hands-on expertise in:

• Application Security and secure code review
• Vulnerability analysis and threat modelling
• Static analysis / SAST
• C/C++ — one strong area of expertise
• C#, TypeScript, or Python — depending on your primary strength
• Understanding of how vulnerabilities manifest across different application architectures

You don't need to be an expert in everything. Deep expertise in one area, strong security fundamentals, and the ability to reason about unfamiliar code are more important.

Why this role?

This isn't a conventional AppSec role. You'll be working at the intersection of software security, static analysis, LLMs, and security research—helping us understand where AI genuinely improves security engineering and where it still needs human expertise.

If you enjoy breaking down code, finding vulnerabilities, experimenting with new techniques, and asking "Can we make this better with AI?"—we'd like to hear from you.

Location: Bangalore

Role: Full-time

Experience: Strong hands-on security/code analysis experience preferred