Director, Information Security

InvestCloud India; Bengaluru; On-site; INR 7,000,000 - 12,000,000; Full time

Job summary

InvestCloud India is seeking a seasoned Senior Security Engineering Leader in Bengaluru to steer the security program, architect an AI-driven automation stack, and drive proactive risk remediation across our product landscape.

You will manage a 4-person senior team, collaborate with global InfoSec peers, and champion scalable security practices, including SAST/DAST/SCA, CI/CD security gates, and evidence-based workflows.

Qualifications

• 15+ years in information security engineering with senior leadership experience.
• Hands-on Python development—production-quality code and security automation.
• Proven experience delivering security programmes at scale (SAST/SCA/DAST) across multi-product estates.

Responsibilities

• Lead a team of security engineers, setting direction and mentoring growth.
• Own design and evolution of an AI-driven security automation platform.
• Define graduated automation policies and governance for automated remediation.
• Represent Bengaluru security team in global InfoSec forums, reporting KPIs and security posture to executives.
• Drive transformation from manual vulnerability triage to platform-driven workflows.
• Hire, develop, and retain dual-track security engineers (InfoSec and automation).

Skills

Python development

Technical leadership

Security automation

Security engineering

CI/CD security

Vulnerability management

Tools

SAST

DAST

SCA

CI/CD tooling

Job description

IC Bangalore India
Vaishnavi Tech Park
Sy.No.16/1 and 17/2, Bellandur Gate
Bengaluru, KA 560102, IND

IC Bangalore India
Vaishnavi Tech Park
Sy.No.16/1 and 17/2, Bellandur Gate
Bengaluru, KA 560102, IND

• Technical Leadership: Lead a team of 4 senior security engineers - setting technical direction, reviewing code, owning architecture decisions, and ensuring every engineer grows in both traditional InfoSec depth and agentic AI engineering capability.
• Automated Security Platform: Own the design, deployment, and ongoing evolution of our intelligent security response platform - a Python-based, AI-driven pipeline that automates vulnerability discovery, contextual triage, reasoning, and graduated remediation across our full product estate.
• Autonomy Policy & Governance: Define and own the graduated automation policy - what the platform may execute automatically, what requires human approval, and what constitutes a break-glass escalation. You hold the senior technical authority for automated remediation decisions.
• Global InfoSec Interlock: Operate as the primary technical representative of the Bengaluru security engineering team in global InfoSec forums - owning the security posture reporting, KPI tracking (MTTA, SAST coverage, remediation velocity), and executive-level updates.
• InfoSec Transformation: Lead the progressive transition from reactive, manual vulnerability management to a proactive, automated, evidence-driven security practice - retiring manual triage queues, spreadsheet tracking, and ad hoc patching in favour of platform-driven workflows.
• Team Development: Hire, develop, and retain security engineers who are genuinely dual-track - capable of operating traditional security tooling and building and maintaining the agentic layer that reasons over it.

WHAT WE ARE LOOKING FOR

• 15+ years in information security engineering, with at least 8 years in a technical leadership or senior engineering management role - you must be credible as an engineer to the team you lead.
• Hands-on Python development experience - you write production-quality Python, not just review it. Security automation, API integration, and pipeline development are your native territory.
• Proven experience delivering a security engineering programme at scale - SAST/SCA/DAST across a multi-product estate, CI/CD security gate enforcement, vulnerability lifecycle management end-to-end.
• Direct experience with agentic AI or LLM-based automation in a production security context - confidence-scored decision pipelines, human-in-the-loop gate design, automated evidence generation.
• Experience designing and governing automated remediation policies - graduated autonomy models, kill-switch protocols, audit trail requirements, and SOC 2 or equivalent compliance mapping.
• Track record of building and developing dual-track security engineering teams - engineers who are both InfoSec practitioners and automation/AI builders.
• Background in FinTech, enterprise SaaS, or a regulated technology environment - practical understanding of how compliance obligations shape security architecture decisions.

CORE TOOLING & TECHNOLOGIES