Director, Information Security

InvestCloud, Inc.; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

InvestCloud, Inc. seeks a Technical Leader for the Bengaluru InfoSec team to steer architecture, advocate automation, and evolve an AI-driven security platform across the product estate.

You will mentor engineers, own critical security pipelines, and drive a proactive risk posture with measurable KPIs and governance.

Qualifications

• 15+ years in information security engineering, with 8+ years in leadership or senior management.
• Hands-on Python development experience in production-grade systems.
• Proven track record delivering security programs at scale (SAST/SCA/DAST).
• Experience with agentic AI or LLM-based automation in production security.
• Experience designing automated remediation policies and governance.

Responsibilities

• Lead a team of 4 senior security engineers, setting direction and reviewing code.
• Own design, deployment, and evolution of an AI-driven security platform.
• Define graduated automation policies and governance for autonomous remediation.
• Represent Bengaluru security team in global InfoSec forums and reports.
• Drive transition from manual triage to platform-driven workflows.
• Hire and develop dual-track engineers for security and automation.

Skills

Technical leadership

Security architecture

People management

Python development

Security automation

Education

Bachelor's degree in Computer Science or related field

Tools

Python

Snyk

SonarQube

Tenable

Wiz

LangChain / LangGraph

Claude / GPT-4o APIs

Jira / JSM

GitLab CI

Datadog

OWASP ASVS

SOC 2

CVSS

Job description

• Technical Leadership: Lead a team of 4 senior security engineers — setting technical direction, reviewing code, owning architecture decisions, and ensuring every engineer grows in both traditional InfoSec depth and agentic AI engineering capability.
• Automated Security Platform: Own the design, deployment, and ongoing evolution of our intelligent security response platform — a Python-based, AI-driven pipeline that automates vulnerability discovery, contextual triage, reasoning, and graduated remediation across our full product estate.
• Autonomy Policy & Governance: Define and own the graduated automation policy — what the platform may execute automatically, what requires human approval, and what constitutes a break-glass escalation. You hold the senior technical authority for automated remediation decisions.
• Global InfoSec Interlock: Operate as the primary technical representative of the Bengaluru security engineering team in global InfoSec forums — owning the security posture reporting, KPI tracking (MTTA, SAST coverage, remediation velocity), and executive-level updates.
• InfoSec Transformation: Lead the progressive transition from reactive, manual vulnerability management to a proactive, automated, evidence-driven security practice — retiring manual triage queues, spreadsheet tracking, and ad hoc patching in favour of platform-driven workflows.
• Team Development: Hire, develop, and retain security engineers who are genuinely dual-track — capable of operating traditional security tooling and building and maintaining the agentic layer that reasons over it.

What We Are Looking For

• 15+ years in information security engineering, with at least 8 years in a technical leadership or senior engineering management role — you must be credible as an engineer to the team you lead.
• Hands-on Python development experience — you write production-quality Python, not just review it. Security automation, API integration, and pipeline development are your native territory.
• Proven experience delivering a security engineering programme at scale — SAST/SCA/DAST across a multi-product estate, CI/CD security gate enforcement, vulnerability lifecycle management end-to-end.
• Direct experience with agentic AI or LLM-based automation in a production security context — confidence-scored decision pipelines, human-in-the-loop gate design, automated evidence generation.
• Experience designing and governing automated remediation policies — graduated autonomy models, kill-switch protocols, audit trail requirements, and SOC 2 or equivalent compliance mapping.
• Track record of building and developing dual-track security engineering teams — engineers who are both InfoSec practitioners and automation/AI builders.
• Background in FinTech, enterprise SaaS, or a regulated technology environment — practical understanding of how compliance obligations shape security architecture decisions.

CORE TOOLING & TECHNOLOGIES

Python (production-level)

• Snyk
• SonarQube
• Tenable
• Wiz
• LangChain / LangGraph
• Claude / GPT-4o APIs
• Jira / JSM
• CI/CD (GitLab CI)
• Datadog
• OWASP ASVS
• SOC 2
• CVSS