Principal Security Engineer

Sarvam; India; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

A pioneering generative AI startup in Bengaluru is seeking a Principal Security Engineer to define security strategies and design secure architectures for their AI infrastructure. The role involves leading threat modeling for products and ensuring application security. Ideal candidates will have hands-on experience in BFSI/Fintech security, participation in CTFs, and involvement in bug bounty programs. Join a team focused on making generative AI impactful for India.

Qualifications

• Hands-on experience in security of enterprise and BFSI/Fintech infrastructure.
• Experience in participating in CTFs across various categories.
• Involvement in bug bounty programs, especially for financial or cloud domains.

Responsibilities

• Define and evolve end-to-end security strategy.
• Design secure architectures for products and API platform.
• Lead threat modeling for AI products and APIs.
• Set up systems to find and validate vulnerabilities.

Skills

Hands-on experience securing enterprise and BFSI/Fintech infrastructure

Participation in CTFs (web, crypto, pwn)

Experience in bug bounty programs for fintech or cloud

Job description

Job type: Full Time · Department: Engineering · Work type: On-Site

Principal Security Engineer

Company Overview

Sarvam AI is a pioneering generative AI startup headquartered in Bengaluru, India. Our mission is to make generative AI accessible and impactful for Bharat. Founded by a team of AI experts, Sarvam.ai is dedicated to developing cost‑effective, high‑performance AI agents tailored for the Indian market, enabling enterprises to tap into new opportunities and foster deeper customer connections. Join us in reshaping AI for India and beyond.

About the Role

Sarvam AI is building foundational AI infrastructure. We’re looking for a hands‑on security leader who brings the rigor, threat‑modeling discipline, and paranoia of BFSI/Fintech security and applies it to security AI infrastructure, platforms and products.

You will own security, strategy, product security, and security research, while staying deeply technical and close to the system you’re securing. You won’t be managing audits all day – you’ll be designing architectures, breaking systems and shipping fixes.

What You’ll Own

Security Strategy & Architecture

• Define and evolve Sarvam AI’s end-to-end security strategy
• Design secure architectures for Sarvam’s products and API platform
• Apply BFSI‑grade threat modeling and controls to AI infrastructure
• Make pragmatic risk decisions balancing research velocity and security

Product & Application Security

• Lead threat modeling for AI products, APIs, and data systems
• Own application and API security, including auth, access control and data isolation
• Drive vulnerability discovery, remediation and verification

Systems and Processes

• Set up systems and process to proactively find and validate vulnerabilities across products and infrastructure
• Perform targeted adversarial testing and red‑teaming
• Research emerging threats relevant to AI systems and enterprise use cases
• Secure cloud infrastructure, IAM and secrets
• Integrate security checks into CI/CD without slowing teams down
• Improve detection and response readiness

You would be a good fit if

• You have hands‑on experience working on securing enterprise and BFSI/Fintech infrastructure
• You have participated in CTFs in web, crypto, pwn or mixed categories
• You have participated in bug bounty programs, especially private programs for fintech, cloud or infra companies