Lead Security Engineer – DevSecOps

Jobtailor; India; On-site; INR 4,000,000 - 6,500,000; Full time

Job summary

Jobtailor is seeking a Senior DevSecOps & AI Security Leader to define and own the security strategy, roadmap, and operating model across cloud, CI/CD, and AI initiatives. You will mentor teams, advise executives, and drive secure design, risk trade-offs, and compliant practices.

You will lead secure architecture reviews, implement automated controls (SAST/DAST/SCA), IaC security, and container scanning, while aligning to regulatory needs and client requirements.

Qualifications

• 10–14+ years in cyber security, DevSecOps, cloud security, or app security roles.
• Solid experience building and scaling DevSecOps teams.
• Relevant certifications (CISSP/CCSP/CISM) are a plus.

Responsibilities

• Define and own DevSecOps and AI security strategy, roadmap, and operating model.
• Advise engineering and product leaders on secure architecture and risk trade-offs.
• Lead security integration across CI/CD pipelines and IaC security.
• Oversee threat modeling, vulnerability management, and security audits.
• Mentor teams and represent security in executive and client discussions.
• Establish guardrails for AI/GenAI, including LLM apps and RAG pipelines.

Skills

Secure Architecture

Risk Trade-Off Analysis

MLSecOps

Automated Security Controls

IaC Security

Threat Modeling

Vulnerability Management

Security Metrics & Reporting

Leadership & Mentoring

Advisory Skills

Education

Bachelor's or Master's in Engineering/CS or related field

Tools

Terraform

CloudFormation

Jenkins

GitHub

GitHub Actions

SAST/DAST/SCA tools

Container Scanning

Job description

Responsibilities

• Define and own the DevSecOps and AI Security strategy, roadmap, and operating model aligned to business and regulatory needs.
• Act as a senior advisor to engineering, platform, AI, and product leaders on secure architecture and risk trade-offs.
• Build and scale high-performing DevSecOps and AppSec teams; mentor other team members.
• Represent security in executive forums, client discussions, audits, and risk reviews.
• Lead security integration across CI/CD pipelines using Jenkins, GitHub, GitHub Actions, and similar tooling.
• Establish enterprise standards for secure build pipelines, secrets management, IaC security (Terraform / CloudFormation), and dependency and supply‑chain security.
• Drive adoption of automated security controls: SAST, DAST, SCA, API security, container scanning.
• Oversee application security programs including threat modeling, secure design reviews, and vulnerability management.
• Monitor and improve daily operations and BAU activities.
• Establish guardrails for AI/GenAI solutions, including LLM‑based apps, RAG pipelines, and agentic workflows.
• Assess and mitigate risks such as prompt injection, data leakage, insecure integrations, model abuse, and third‑party AI risk.
• Embed AI security controls into DevSecOps/MLOps pipelines (MLSecOps).
• Translate regulatory and client security requirements into practical engineering controls.
• Own security metrics, risk reporting, control evidence, and audit readiness.

Requirements

• Bachelor’s/master’s degree in engineering, Computer Science, or related field.
• 10–14+ years in cyber security, DevSecOps, cloud security, or application security roles.
• Certifications such as CISSP, CCSP, CISM, or cloud security certifications are a plus.

Hard Skills

• Secure Architecture
• Risk Trade‑Off Analysis
• IaC Security (Terraform / CloudFormation)
• Automated Security Controls (SAST, DAST, SCA)
• Vulnerability Management
• Threat Modeling
• Secrets Management
• Container Scanning
• MLSecOps
• Security Metrics and Reporting

Soft Skills

• Mentoring
• Advisory Skills
• Collaboration
• Communication

Certifications & Qualifications

• CISSP
• CCSP
• CISM