Principal Information Security Engineer (Product Security + SecOps)

Cognite; Bengaluru; On-site; INR 4,500,000 - 6,500,000; Full time

Benefits offered by this job

Healthcare benefits

Foundational leadership role

Global collaboration

Job summary

Cognite is seeking a Principal Information Security Engineer in Bengaluru to lead security engineering across Product Security and SecOps. You will drive AI-powered detection, secure-by-design practices, and coordination with global teams.

You will build and manage a local security team, mentor engineers, and advance cloud security, threat modeling, and automation across multi-cloud environments.

Qualifications

• Experience applying AI/ML to security tasks and automation.
• Solid understanding of secure SDLC, vulnerability triage, and app scanners.
• Leadership potential with ability to scale security teams and programs.

Responsibilities

• Design, build, and deploy AI-driven SecOps and product security guardrails.
• Lead threat modeling and hardening of cloud-native environments (AWS/GCP/Azure).
• Hire, mentor, and scale Bengaluru security hub; drive regional initiatives.

Skills

AI Expertise

Product Security

SecOps

Engineering & Coding

Leadership

Continuous Improvement

Tools

CodeQL

OWASP ZAP

Job description

What Cognite is: Relentless to achieve

Cognite operates at the forefront of industrial digitalization, building AI and data solutions that solve the world’s hardest, highest-impact problems. With unmatched industrial heritage and a comprehensive suite of AI capabilities, including low-code AI agents, Cognite accelerates the digital transformation to drive operational improvements.

We thrive in challenges. We challenge assumptions. We execute with speed and ownership. If you view obstacles as signals to step forward - not backwards - you’ll feel right at home here.

Our Moonshot is bold: Unlock $100B in customer value by 2035, and redefine how global industry works. Join us in this venture where AI and data meet ingenuity, and together, we will forge the path to a smarter, more connected industrial future.

How you’ll demonstrate Ownership

Principal Information Security Engineer (Product Security + SecOps)

Location: Bengaluru, India

About Us

Cognite operates at the forefront of industrial digitalization, building AI and data solutions that solve some of the world\’s hardest, highest-impact problems. With an unmatched industrial heritage and a comprehensive suite of AI capabilities, including low-code AI agents, Cognite accelerates digital transformation to drive operational improvements globally.

Our moonshot is bold: unlock $100B in customer value by 2035 and redefine how global industry works.

What Cognite Is Relentless To Achieve

We thrive in challenges. We challenge assumptions. We execute with speed and ownership. If you view obstacles as signals to step forward—not step back—you\'ll feel at home here. Join us in this venture where AI and data meet ingenuity, and together, we forge the path to a smarter, more connected industrial future.

How You’ll Demonstrate Ownership

As our first security hire in Bengaluru, you will be the foundational cornerstone of our security presence in India. This role is a unique hybrid, blending deep technical execution with an explicit, high-growth leadership trajectory. You will start as an elite individual contributor establishing local capabilities across Product Security and Security Operations (SecOps).

You are fully expected to hire, build out, and directly manage a world-class, multi-disciplinary security engineering team at this location. A heavy, non-negotiable emphasis of this role is the aggressive implementation and orchestration of Artificial Intelligence (AI) to automate, optimize, and supercharge both our SecOps detection pipelines and Product Security guardrails globally.

The Impact you bring to Cognite

You Will Bridge The Gap Between Application Security And Infrastructure Defense, Driving Operational Excellence, Architectural Innovation, And Team Expansion Across Several Core Pillars

Core Security Engineering & Automation

• AI-Driven SecOps: Design, test, and deploy automated detection logic and incident playbooks powered by AI agents to dramatically reduce alert fatigue and speed up response times. Integrate AI into SIEM/SOAR data pipelines to identify anomalous behavior and emerging risks across large multi-cloud datasets.
• AI-Accelerated Product Security: Implement automated code analysis and scanning (SAST/SCA) within CI/CD pipelines, leveraging AI-assisted remediation to give developers \"how-to-fix\" guidance instantly. Build proprietary security automation (\"guardrails\") that empower software squads to build secure-by-design software at speed.
• Threat Modeling & Hardening: Lead feature-level threat models for high-stakes software projects and actively harden cloud-native environments (AWS/GCP/Azure) and identity management systems.

Technical Leadership & Team Building

• Act as the Directly Responsible Individual (DRI) for regional security initiatives, navigating technical hurdles early and making evidence-based decisions.
• Champion the \"Security Champions\" program locally, conducting developer security workshops and fostering a high-trust, decentralized execution culture.
• Own the long-term hiring, mentoring, and performance strategy for the Bengaluru security hub, expanding our regional capabilities in lockstep with global organizational goals.
• Transition strategic security initiatives from \"build and operate\" phases into stabilized, long-term regional ownership structures.

Key Skills And Experience

You do not need to tick every single box, but we expect a mature mix of technical execution, visionary engineering, and emerging leadership potential:

• AI Expertise: Demonstrated, hands-on experience leveraging LLMs, AI agents, or machine learning models to automate security tasks, orchestrate response flows, or parse complex threat telemetry.
• Product Security Domain: Solid understanding of secure SDLC practices, vulnerability triage, and application scanners (SAST, DAST, SCA tools like CodeQL, OWASP ZAP).
• SecOps Domain: Proven experience in threat hunting, incident response management under pressure, and writing detection rules-as-code within modern SIEM/SOAR systems.
• Engineering & Code Proficiency: Strong script and tool development capabilities using Python, Go, or PowerShell, coupled with an automated DevOps mindset (CI/CD tools, Terraform, APIs).
• Leadership Vector: Clear capability and ambition to step up, scale, and manage a team—including distinct verbal/written communication, stakeholder management, and a high degree of empathy for code creators.
• Continuous-Improvement Mindset: A continuous desire to learn and treat every single alert, incident, or system hurdle as a metric-driven data point to make global defenses stronger.

A Snapshot Of Our Perks And Benefits In Bengaluru

• The rare opportunity to be the foundational \"First Hire\" locally, with an explicit, fast-tracked organizational path to build and scale your own team.
• Dedicated Security Exploration Days every second Friday—a full day completely isolated from normal queues, dedicated entirely to your personal research, AI experimentation, and learning.
• A flat organizational structure giving you direct access to executive decision-makers (VP of Security, global CISO).
• Comprehensive private healthcare offerings and health and wellness benefits.
• Engaging, cross-border collaboration with a deeply passionate community of security experts across 60+ nationalities.

Preferred Experience

• 10+ years of preferred technical skills or experience

Learn More About Us

• Impact 2025
• Cognite\'s Industrial AI: Moonshot
• We’re globally recognized domain experts with an international presence that spans Phoenix, Houston, Oslo Tokyo, Bengaluru, and Abu Dhabi.

Equal Opportunity

Cognite is committed to creating a diverse and inclusive environment at work and is proud to be an equal opportunity employer. All qualified applicants will receive the same level of consideration for employment.