Security Compliance Engineer

Trianz; Bengaluru; On-site; INR 2,600,000 - 4,600,000; Full time

Job summary

Trianz is seeking an experienced Security Architect to execute the security architecture for AI products. You will run hands-on security audits, implement guardrails, and prepare the compliance artifacts used by enterprise sales.

You will collaborate with engineering, product, and security teams to ensure SOC2/GDPR readiness and secure CI/CD pipelines using tools like Trivy, Checkov, and Semgrep.

Qualifications

• Hands-on security audit experience on cloud-hosted apps or infra.
• Built or deployed security tooling in CI/CD pipelines (SAST, container scanning, IaC scanning).
• Experience with at least one compliance framework (SOC2, GDPR, ISO27001).
• Scripting depth for security automation: Python or Bash.
• 3+ years in security engineering with real delivery experience.

Responsibilities

• Run security audits on product modules and AI serving infrastructure against defined security standards.
• Audit serving infrastructure: container image security, network policies, secrets management, access controls.
• Build and deploy LLM guardrail implementations: input validation filters, output screening, rate limiting.
• Produce and maintain the compliance documentation pack: SOC2 evidence, GDPR data flow maps, pen test reports.
• Run automated security scanning in CI/CD pipelines: Trivy, Checkov, Semgrep, or equivalent.
• Maintain the security findings tracker and drive remediation with engineering teams.
• Support enterprise sales with security questionnaire responses and customer security reviews.

Skills

Security audits

CI/CD tooling

Compliance frameworks

Scripting (Python/Bash)

Security engineering

Tools

Trivy

Checkov

Semgrep

Job description

Trianz is an applied AI solutions company that accelerates customer business transformation through AI powered "Transformation Services as a Software Model". With 25+ years of transforming enterprises, we've evolved to a product-led, platform-driven organization serving global enterprises across Financial Services, Insurance, Healthcare, Hi-Tech, Manufacturing, and other industries.

With global presence across 4 continents, our platform portfolio under the unified Concierto brand delivers end-to-end transformations including solutions for Migrate, Manage, Maximize, Modernize, Insights & Agentic AI, and SecOps - delivered through strategic partnerships with leading hyperscalers.

We're building the premier innovation-led organization in the digital transformation space through AI-first methodologies and data-driven excellence - RevolutionAIzing Transformations.

Role Overview

You execute the security architecture designed by the Principal AI Security Architect. You run hands-on security audits, build and deploy guardrail implementations, and produce the compliance documentation that enterprise sales uses to close regulated-industry deals. Builder and executor — you run the tools, write the scripts, and produce the artefacts.

Key responsibilities

• Run security audits on product modules and AI serving infrastructure against defined security standards
• Audit serving infrastructure: container image security, network policies, secrets management, access controls
• Build and deploy LLM guardrail implementations: input validation filters, output screening, rate limiting
• Produce and maintain the compliance documentation pack: SOC2 evidence, GDPR data flow maps, pen test reports
• Run automated security scanning in CI/CD pipelines: Trivy, Checkov, Semgrep, or equivalent
• Maintain the security findings tracker and drive remediation with engineering teams
• Support enterprise sales with security questionnaire responses and customer security reviews

Ideal Candidate Experience

Exp: 8+ years

Must Have

• Hands-on security audit experience — ran real audits on cloud-hosted applications or infrastructure
• Built or deployed security tooling in a CI/CD pipeline: SAST, container scanning, IaC scanning
• Experience with at least one compliance framework hands-on: SOC2, GDPR, ISO27001
• Scripting depth for security automation: Python or Bash
• 3+ years in security engineering with real delivery experience

Nice To Have

• AI or LLM security experience: prompt injection testing, guardrail evaluation
• DPDP Act (India) compliance process knowledge
• CSPM tools: Wiz, Orca, Prisma Cloud, or equivalent

Why Join Trianz?

Strategic Impact

Own the delivery map for Fortune 500 AI transformations. Your delivery discipline directly enables global enterprises to accelerate digital transformation. You'll report status to CEOs and boards, influencing multi-million-dollar decisions.

AI Product Fluency

Work with cutting-edge AI infrastructure and models. Coordinate delivery across sovereign AI systems, model serving optimization, and enterprise transformation programmes. Understand deeply why AI product delivery is different.

Manage delivery for transformations across continents, industries, and mission-critical use cases. See your programmes deployed at Fortune 500 organizations with real business impact.

Pure IC role with ownership authority. Your delivery decisions move fast — no slow approval cycles, no micromanagement. You own the outcomes.

Growth Through Complexity

Thrive in the emerging sovereign AI space where delivery is complex, timelines are uncertain, and your expertise will define how AI organizations scale.