Cyber Security Engineer

Grid Dynamics; Hyderabad, Chennai District, Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Benefits offered by this job

Bleeding-edge projects

Medical insurance

Professional development

Well-equipped office

Flexible schedule

Job summary

Grid Dynamics is seeking a senior security architect to own the end-to-end security strategy roadmap and align testing frameworks with product needs. The role emphasizes maintaining detection quality, benchmarking, and external representation to stakeholders.

You will ship lenses and rule packs, enable customer customization, and build retrieval tooling while ensuring governance and secure release practices across teams.

Qualifications

• Model runtime prompt engineering, diff-based scanning and code parsing expertise.
• Experience with RAG/retrieval systems and secure development processes.
• Hands-on with Git/GitHub/GitLab automation and CI/CD pipelines.
• Knowledge of credential management and SBOM/SCA scanning practices.
• Familiarity with observability, containers, and release engineering.

Responsibilities

• Owns the end-to-end security strategy roadmap and aligns tools to product needs.
• Define detection quality measures and curate benchmark corpora for validation.
• Ship versioned lenses and rule packs, with registries and customer customization.
• Build read-only retrieval over Confluence/ADRs and enable governance tooling.
• Collaborate with security teams and review harness changes for impact.

Skills

Prompt engineering

Code parsing

RAG retrieval

Git/GitHub CI/CD

Credential management

SBOM/SCA

Observability tracing

Containers

GRC tooling

Tools

tree-sitter

GitHub

GitLab

Jira

Job description

Security Strategy Roadmap

Owns the end-to-end security capability roadmap covering vulnerability classes, detection methods, and verification techniques and continuously reviews the competitive landscape across both commercial and open source security tools to keep the product's approach current.

Selects and embeds the security testing frameworks and methodologies the product aligns to, tracking emerging attack classes and testing techniques and deciding when and how they should be incorporated into the product.

Owns the product's overall security thesis and represents it externally to stakeholders, customers, and the wider community, while also setting the security requirements for the harness itself.

Detection Quality Measurement

Owns detection quality across all specialist analysis lenses, ensuring consistency and reliability of results.

Designs and curates the benchmark corpus a structured set of seeded and labelled vulnerabilities used to validate detection performance.

Owns the measurement methodology and safeguards the integrity of all published detection figures.

Adjudicates whether findings are genuine, setting and maintaining the triage standard used across the team.

Runs the standing evaluation program benchmarking competing tools and techniques against the corpus.

Reviews external contributions and changes to the harness for potential security impact before they're merged.

Hands-On Execution Support

Essential functions

• Takes detection specs from the security team and ships them as versioned lenses and rule packs, with a prompt registry and a way for customers to add their own.
• Implements chunking that cuts at function boundaries and packs by real token counts, using the tree-sitter call graph, to the senior engineer's design.
• Builds read-only retrieval over Confluence, ADRs and design docs that keeps the source permissions and cites what it used.
• Builds the reviewer feedback loop (labels stored against fingerprints, suppression, precision reporting) and the exports to GRC and ASPM tools.

Qualifications

Model runtime prompt engineering, diff-based scanning fingerprinting, tree-sitter / code parsing, RAG / retrieval systems, Git/GitHub/GitLab automation, Jira/CI-CD integrations, credential management, SBOM/SCA/secrets scanning, KEV/EPSS feeds, observability tracing, release engineering (containers, signed builds), GRC/ASPM tooling.

We offer

• Opportunity to work on bleeding-edge projects
• Work with a highly motivated and dedicated team
• Competitive salary
• Flexible schedule
• Benefits package - medical insurance, sports
• Corporate social events
• Professional development opportunities
• Well-equipped office