Head of Security

HuntingCube; Karnataka; On-site; INR 1,500,000 - 3,200,000; Full time

Job summary

HuntingCube seeks a senior security leader to set the security direction and build a practical roadmap for our systems, data, deployment environments, and AI-enabled features. You will lead threat modeling, design reviews, and strengthen authorization, data boundaries, and protections across products and tools.

You will own cloud and data security controls, drive IT security, identity management, and a culture of secure design and incident readiness across engineering and leadership.

Qualifications

• Experience building and maturing security programs across product, cloud, and data environments.
• Strong ability to translate risk into concrete controls and governance.
• Hands-on expertise in threat modeling, architecture reviews, and security design.
• Proven track record in incident response and post-incident improvements.
• Ability to influence leadership and coordinate cross-functional teams over time.

Responsibilities

• Set the security direction and develop a practical roadmap aligned with systems and risks.
• Lead threat modeling and security design reviews for applications, APIs, and AI features.
• Strengthen cloud and data security: IAM, Kubernetes, encryption, CI/CD, access controls.
• Own internal IT security: device baseline, endpoint protection, MFA, least privilege, reviews.
• Define clear employee security standards and onboarding—onboarding and governance.

Skills

Security

Cloud Security

Job description

• Set the security direction. Build and maintain a practical security roadmap based on our systems, data, deployment environments, and most consequential risks. Make priorities, ownership, progress, and unresolved risks clear to leadership.
• Secure our products and AI workflows. Lead threat modeling and security design reviews across applications, APIs, and AI-enabled features. Strengthen authorization, data boundaries, and protections around model inputs, outputs, and access to tools or data. Help engineers catch problems during design and development.
• Strengthen cloud and data security. Set and validate controls for cloud identities, Kubernetes, storage, secrets, encryption and key management, CI/CD, and developer and research access. Work with engineering and deployment teams to protect information throughout its lifecycle, including retention and deletion.
• Own internal IT security. Establish an inventory and security baseline for employee devices and business applications. Drive endpoint protection, device management, encryption, patching, secure configuration, and recovery. Strengthen identity and access management through SSO, MFA, least privilege, access reviews, and timely access changes when people join, change roles, or leave. Review SaaS tools, integrations, and employee tooling, including AI tools, and work with the relevant owners to implement and verify controls.
• Set practical employee security standards. Define clear expectations for employees and contractors covering acceptable use, approved tools, credentials, device use, remote work, and data classification, handling, sharing, retention, and disposal. Work with People and operations to make the standards understandable and part of onboarding and everyday workflows. Establish a documented exception process with a named approver, risk owner, expiry, and follow-up.
• Build a strong security culture. Make it easy to ask questions and report mistakes or suspicious activity early, without blame. Develop role-based onboarding and regular training, practical exercises, and security champions where useful. Work with leaders to model good practices and make their teams' responsibilities clear. Measure adoption and outcomes, including control coverage, reporting readiness, and closure of exercise findings, and improve the program based on what people actually do.
• Make vulnerability management effective. Own the path from discovery and intake through prioritization, remediation, and retesting. Coordinate independent security testing where it adds value, and help engineering teams fix underlying causes as well as individual findings.
• Build detection and incident response. Establish useful monitoring, clear escalation paths, and response playbooks across products, infrastructure, and internal systems. Lead security investigations and coordinate containment, recovery, and follow-through. Work with the team to define sustainable incident coverage and test our readiness.
• Build security capability. Develop the team and specialist support needed as the organization grows. Coach colleagues and use automation to make good practices repeatable. Recommend the staffing, tools, and budget needed to deliver the roadmap.
• Support trustworthy assurance. Maintain evidence that controls work and help answer security questions from customers and partners. Work with legal and operations on privacy, contractual obligations, and agreed audit or certification readiness. Keep external commitments grounded in what we can demonstrate.
  
  

Job Description

• Set the security direction. Build and maintain a practical security roadmap based on our systems, data, deployment environments, and most consequential risks. Make priorities, ownership, progress, and unresolved risks clear to leadership.
• Secure our products and AI workflows. Lead threat modeling and security design reviews across applications, APIs, and AI-enabled features. Strengthen authorization, data boundaries, and protections around model inputs, outputs, and access to tools or data. Help engineers catch problems during design and development.
• Strengthen cloud and data security. Set and validate controls for cloud identities, Kubernetes, storage, secrets, encryption and key management, CI/CD, and developer and research access. Work with engineering and deployment teams to protect information throughout its lifecycle, including retention and deletion.
• Own internal IT security. Establish an inventory and security baseline for employee devices and business applications. Drive endpoint protection, device management, encryption, patching, secure configuration, and recovery. Strengthen identity and access management through SSO, MFA, least privilege, access reviews, and timely access changes when people join, change roles, or leave. Review SaaS tools, integrations, and employee tooling, including AI tools, and work with the relevant owners to implement and verify controls.
• Set practical employee security standards. Define clear expectations for employees and contractors covering acceptable use, approved tools, credentials, device use, remote work, and data classification, handling, sharing, retention, and disposal. Work with People and operations to make the standards understandable and part of onboarding and everyday workflows. Establish a documented exception process with a named approver, risk owner, expiry, and follow-up.
• Build a strong security culture. Make it easy to ask questions and report mistakes or suspicious activity early, without blame. Develop role-based onboarding and regular training, practical exercises, and security champions where useful. Work with leaders to model good practices and make their teams' responsibilities clear. Measure adoption and outcomes, including control coverage, reporting readiness, and closure of exercise findings, and improve the program based on what people actually do.
• Make vulnerability management effective. Own the path from discovery and intake through prioritization, remediation, and retesting. Coordinate independent security testing where it adds value, and help engineering teams fix underlying causes as well as individual findings.
• Build detection and incident response. Establish useful monitoring, clear escalation paths, and response playbooks across products, infrastructure, and internal systems. Lead security investigations and coordinate containment, recovery, and follow-through. Work with the team to define sustainable incident coverage and test our readiness.
• Build security capability. Develop the team and specialist support needed as the organization grows. Coach colleagues and use automation to make good practices repeatable. Recommend the staffing, tools, and budget needed to deliver the roadmap.
• Support trustworthy assurance. Maintain evidence that controls work and help answer security questions from customers and partners. Work with legal and operations on privacy, contractual obligations, and agreed audit or certification readiness. Keep external commitments grounded in what we can demonstrate.
  
  

Required Skills

['Security', 'Cloud Security']

Additional Information

• 10+ Years experience building or materially improving a security program, with examples of risks you reduced and changes that held up in production.
• Strong hands-on depth in application and cloud security. You can read code, assess architecture, investigate a finding, and work with engineers on a fix.
• Practical experience securing employee devices, identities, SaaS applications, and the employee access lifecycle. You can turn policy into controls that work for a growing organization.
• Sound judgment about authorization, trust boundaries, cryptography, secrets, and data access. You know when to investigate further and when a simpler control is sufficient.
• Experience leading incident response and translating what happened into durable technical and operational improvements.
• Evidence that you can lead people and cross-functional work, through hiring, coaching, building a team, or getting sustained security improvements adopted across the company.
• Experience making employee security standards and training useful in practice, with evidence of adoption and improved behavior.
• Clear communication with technical and nontechnical colleagues. You can explain risk, uncertainty, and trade-offs without losing the detail needed to make a decision