Security Engineer

Dneg; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

DNEG is seeking a security professional to assess applications, cloud services, AI use cases, and third‑party tools before and during their use across the company. The role combines practical security architecture reviews with hands‑on evaluation of security solutions.

The successful candidate will document risks, recommend workable controls, and support informed approval decisions across engineering, product, and other teams.

Qualifications

• Approximately five years of relevant experience in app security, cloud security, or security architecture.
• Experience reviewing designs, threat modelling, and risk-based remediation.
• Knowledge of API security testing and secure SDLC practices.
• Hands-on security controls in major cloud platforms (identity, network, data protection, monitoring).
• Experience evaluating third-party products and AI security considerations.

Responsibilities

• Review application and API designs for authentication, authorization, data protection and secure integration.
• Perform threat modelling for new systems and significant changes, and propose verifiable controls.
• Assess cloud architectures, including identity, networking, secrets, encryption, and logging.
• Review AI applications for data exposure, access control, unsafe outputs, and third-party dependencies.
• Evaluate third-party tools before use, reviewing security posture and evidence.
• Plan proof of concepts for security tools and document effectiveness and limitations.
• Prepare concise risk assessments and remediation paths; track findings with owners.

Skills

Threat modelling

Security reviews

Cloud security

Application security

AI security

Stakeholder comms

Education

Bachelor's degree in CS/IT or equivalent

Tools

ISO 27001

NIST

OWASP

Job description

DNEG is seeking a security professional to assess applications, cloud services, AI use cases, and third‑party tools before and during their use across the company. The role combines practical security architecture reviews with hands‑on evaluation of security solutions. The successful candidate will document risks, recommend workable controls, and support informed approval decisions.

Mandatory Requirements and Expectations

Own defined security reviews independently and escape material risks or complex decisions to senior security stakeholders. Provide clear, evidence‑based recommendations that account for security risk, business use, and implementation effort. Work closely with engineering, cloud, product, and other internal teams to understand designs and agree on practical actions. Maintain accurate review records, decisions, conditions, and follow‑up actions for the security approval process. Communicate findings constructively to both technical and non‑technical stakeholders.

Duties and Operational Responsibilities

Review application and API designs for authentication, authorization, data protection, secure integration, and common attack paths. Perform threat modelling for new systems and significant changes, and recommend controls that can be implemented and verified. Assess cloud architectures and configurations, including identity, network exposure, secrets, encryption, logging, and workload security. Review proposed AI applications and services for data exposure, access control, unsafe outputs, prompt injection, and third‑party dependencies. Evaluate third‑party tools before company use by reviewing their security posture, data flows, permissions, integrations, and relevant assurance evidence. Plan and run proof of concepts for application, cloud, and AI security tools using agreed evaluation criteria; document effectiveness, integration needs, and limitations. Prepare concise risk assessments and recommendations, including proposed conditions or remediation needed before approval. Track findings with system and service owners, validate remediation evidence, and identify unresolved risks for escalation.

Contribute to security standards, review checklists, and reusable design guidance to improve consistency across assessments.

Mandatory Job Requirements

A successful candidate should demonstrate the following experience and capabilities: Approximately five years of relevant experience in application security, cloud security, security engineering, or security architecture. Experience reviewing application designs and applying secure development practices, threat modelling, and risk‑based remediation. Working knowledge of application and API security testing, including code, dependency, and dynamic testing approaches. Hands‑on understanding of security controls in at least one major cloud platform, particularly identity, networking, data protection, and monitoring. Ability to evaluate unfamiliar technologies through proof of concepts, define success criteria, and present a balanced recommendation. Experience assessing third‑party products or services, including how they access, process, store, and share company or client data. Working knowledge of security risks in AI‑enabled applications and the controls used to address them. Strong written communication and the ability to work with engineers and stakeholders to resolve identified risks. Desirable Experience Direct experience assessing generative AI applications, including retrieval‑based systems or applications that use external tools. Experience with security assurance reports, vendor questionnaires, and recognized security frameworks such as ISO 27001, NIST, CIS, or OWASP guidance. Experience evaluating or operating application security, cloud security, or AI security tooling.

Education

A bachelor's degree in computer science, information technology, cybersecurity, or equivalent practical experience is desirable. Relevant security or cloud certifications are desirable but are not a substitute for demonstrated practical experience.

About Us

We are DNEG, one of the world’s leading visual effects and animation companies for the creation of award‑winning feature film, television, and multiplatform content. We employ more than 9,000 people with worldwide offices and studios across North America (Los Angeles, Montréal, Toronto, Vancouver), Europe (London), Asia (Bangalore, Mohali, Chennai, Mumbai) and Australia (Sydney). At DNEG, we fundamentally believe that embracing our differences is a vital component of our collective success. We are committed to creating an equitable, diverse and inclusive work environment for our global teams, where everyone feels they matter and belong. We welcome and encourage applications from all, regardless of background, experience or disability. Please let us know if you need any adjustments or support during the application process, we will do our best to accommodate your needs. We look forward to meeting you!