Lead Cybersecurity Engineer-AI

Chevron; Bengaluru; On-site; INR 1,800,000 - 2,500,000; Full time

Job summary

A global energy company is seeking a Lead IT Cybersecurity Engineer to focus on secure IT implementations and AI applications. The ideal candidate will have over 10 years of experience in cybersecurity, specializing in AI security. Responsibilities include leading research projects, defining cybersecurity architectures, and ensuring compliance with laws and regulations. This full-time position emphasizes collaboration and innovation within the cybersecurity field.

Qualifications

• 10+ years of work experience in cybersecurity.
• 2+ years of experience in AI security.
• Strong understanding of ML algorithms and LLM models.
• Familiar with cloud platform security.

Responsibilities

• Ensure secure-by-design principles in IT digital capabilities.
• Lead AI security research proposals.
• Create SOPs for AI assessments.
• Integrate security best practices in AI development lifecycle.

Skills

Cybersecurity Experience

AI Security

Machine Learning Knowledge

Cloud Security

Education

Bachelor's or Master's in Cybersecurity/IT

Certifications in IT Cybersecurity

Tools

OWASP

Security Frameworks

Cloud Platforms

Job description

About the position:

The Lead IT Cybersecurity Engineer is responsible for the technical design of IT cybersecurity architectural guidelines and standards, as well as the secure implementation of IT digital technologies across platforms and product lines in Chevron. The primary responsibility is to assure IT solutions are "secure by design", with a high focus on delivering secure AI applications and digital capabilities.

Key responsibilities

Responsibilities include but are not limited to:

• Enable digital transformation by ensuring secure-by-design principles are incorporated in the IT digital capabilities across the enterprise.
• Serve as a subject matter expert in AI security domain of Cybersecurity.
• Lead AI security research proposals and proofs of concept for emerging technologies.
• Define cybersecurity architectures for AI applications and solutions.
• Create SOPs and Checklists for AI assessments.

Required Qualifications

• Minimum 10 years related work experience in cybersecurity with increasing levels of responsibility.
• 2 years of experience in AI security with end-to-end assessment of AI applications along with security of related components.
• Specialized AI and machine learning knowledge, emphasizing secure development, threat detection for AI systems, and compliance with emerging AI regulations.
• A strong understanding of machine learning algorithms, LLM Models, neural networks, deep learning, and frameworks/libraries.
• Familiarity with deploying and securing AI systems on major cloud platforms ( Azure, Google Cloud).
• Technical experience in one or more cybersecurity domains i.e. Cloud Security, Application Security, Data Security, and Identity and Access Management.
• General understanding of the cyber threat landscape

Cybersecurity Implementation Expertise

• OWASP Top 10 for LLMs : Strong understanding of the OWASP Top 10 for LLMs and mitigation strategies. Enforce secure LLM practices across development teams through training, code reviews, and automated checks.
• Ensure that AI systems comply with relevant global AI laws, data privacy regulations (like GDPR), and industry standards (such as the NIST AI Risk Management Framework).
• Work with data science, engineering, and legal teams to integrate security best practices into the AI development lifecycle and address legal and ethical concerns (e.g., bias, transparency).
• Secure SDLC Integration: Deep experience embedding security into every phase of the Software Development Lifecycle (SDLC)—from requirements gathering to deployment—ensuring compliance with organizational and regulatory standards.
• Threat Modeling & Attack Surface Analysis: Conduct threat modeling sessions during design phases using frameworks like STRIDE and DFDs. Perform attack surface analysis to identify potential entry points and recommend design-level mitigations.

Preferred Qualifications

• Knowledge of industry-accepted cyber security frameworks such as NIST 800-53, MITRE ATT&CK, and the Cyber Kill Chain.
• Experience in conducting and/or leading cybersecurity assessments (risk, vulnerability) and creating a detailed mitigation plan and recommendations to address gaps identified.
• Ability to influence and motivate teams, and work with a variety of disciplines, cultures, and environments.
• Demonstrated ability to work effectively, and communicate effectively at all levels with operations, design, projects, vendors, peers, etc.
• Communicates in a clear, concise, understandable manner both orally and in writing.

Preferred Education

• Bachelor’s degree or master’s degree in Cybersecurity, Information Technology, Information Systems, or Computer Science
• Certifications in IT Cybersecurity are highly preferred (e.g., GISP, GREM, ISSEP, OSCP or other similar certification)
• Certifications in SAFe Scaled Agile or related scrum/agile project management framework is desirable.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Engineering and Consulting

Industries

Oil and Gas, IT Services, IT Consulting

Referrals increase your chances of interviewing at Chevron by 2x