Security Engineer ( AI Compliance & Offensive Security )

Dreamcast; Jaipur; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Dreamcast is seeking a security-focused leader to own and scale the security function from the ground up in a fast-paced startup setting. You will drive AI/ML security, governance, and cloud security while enabling aggressive automation and proactive defense.

This role requires hands-on experience with VAPT, secure development, and incident response. You will collaborate with product, engineering, legal, and leadership to build robust controls and foster a security-first culture.

Qualifications

• Hands-on experience with modern AI/ML frameworks and LLMs, with production-quality code and automation pipelines.
• Strong understanding of ISO 27001, SOC 2, and the DPDP Act, with practical compliance implementation.
• Security engineering across cloud, IAM, application and infrastructure security, and DevSecOps practices.
• Hands-on VAPT, red teaming, reconnaissance, exploitation, and remediation recommendations.
• Proficiency in automating security operations using Python, Bash, PowerShell, Terraform and CI/CD.
• Self-driven, able to own security initiatives in fast-paced startup environments.
• Excellent verbal and written communication for cross-functional collaboration.

Skills

AI Engineering

Compliance & Governance

Security Engineering

Offensive Security

Security Automation

Ownership & Problem Solving

Communication

Tools

AWS

Azure

GCP

Terraform

CI/CD

SIEM

Job description

What We're Looking For

• AI Engineering: Hands-on experience with modern AI/ML frameworks and LLMs. Proficient in building AI-powered solutions, writing production-quality code, developing automation pipelines, and leveraging AI to improve security operations and engineering productivity.
• Compliance & Governance: Strong understanding of ISO 27001, SOC 2, and the DPDP Act, with practical experience implementing security controls, maintaining compliance evidence, supporting audits, and translating compliance requirements into operational processes.
• Security Engineering: Solid experience securing cloud environments (AWS, Azure, or GCP), identity and access management (IAM), application security, infrastructure security, and DevSecOps practices. Able to design and implement security controls rather than only recommend them.
• Offensive Security: Hands-on experience with Vulnerability Assessment and Penetration Testing (VAPT), red teaming, reconnaissance, exploitation, and post-exploitation techniques. Ability to identify security weaknesses and provide practical remediation recommendations.
• Security Automation: Proficient in automating security operations using Python, Bash, PowerShell, Infrastructure as Code (Terraform), CI/CD pipelines, or AI-powered security tooling.
• Ownership & Problem Solving: Self-driven professional who thrives in fast-paced startup environments, takes end-to-end ownership of security initiatives, and can execute effectively with minimal supervision.
• Communication: Excellent verbal and written communication skills with the ability to collaborate with engineering, product, legal, and leadership teams while clearly communicating technical concepts to non-technical stakeholders.

Nice to Have

• Professional certifications such as OSCP, CISSP, CEH, ISO 27001 Lead Implementer/Lead Auditor, AWS Security Specialty, or Azure Security Engineer (AZ-500).
• Experience leading or supporting an organization's first SOC 2 Type I/II or ISO 27001 certification journey.
• Experience working in an early-stage startup or building a security function from the ground up.
• Hands-on experience securing AI/LLM applications, agentic AI systems, and implementing controls against LLM-specific threats such as prompt injection, data leakage, and model abuse.
• Familiarity with security monitoring, SIEM solutions, incident response, threat modeling, and cloud-native security tools.

Why This Role

• Real ownership — you build and run the security function, set the standards, and leave a lasting mark.
• Direct mentorship from an experienced Virtual CISO, with the autonomy to execute your own way.
• A rare blend of building, automating, defending, and attacking — no two weeks look the same.
• High-trust, high-impact, high-visibility work at a company that takes security seriously from day one.