Senior AI Platform Engineer - Security

Esko-Graphics India Private Limited; India; Hybrid; INR 1,800,000 - 3,200,000; Full time

Job summary

Esko-Graphics India Private Limited seeks a Senior AI Platform Engineer - Security to own end-to-end security across a flexible location setup. This hands-on role focuses on designing identity, authorization, policy enforcement, and audit capabilities for AI systems in a multi-tenant environment.

You will collaborate with cloud platform teams, security engineers, compliance specialists, and product teams to implement practical, scalable security controls while balancing usability and operational

Qualifications

• Strong software engineering experience designing, building, and operating secure production systems.
• Experience securing cloud, distributed or platform services, incl. auth and multi-tenant isolation.
• Threat modelling, app security testing, turning risks into controls.
• Experience with LLMs, retrieval-augmented generation, or agents.
• Design and build reusable platform controls and APIs.
• Ability to communicate security decisions across teams.
• Educational background in CS/ML/AI or related fields.

Responsibilities

• Shape AI Platform security architecture and own significant security components.
• Design identity, authorization, delegated-access, and policy controls across tenants and users.
• Secure retrieval, tool use, and execution against prompt injection and data leakage.
• Implement controls with risk-based gates, isolation, and recovery.
• Build audit and monitoring to trace activity and detect high-risk behavior.
• Conduct threat modelling and translate findings into platform controls.
• Collaborate across teams to integrate controls meeting security obligations.

Skills

Software engineering

Cloud security

Threat modelling

Security testing

LLMs/Agents

Platform controls

Security judgement

Communication

Education

CS/ML/AI degree

Job description

Senior AI Platform Engineer - Security Location: Flexible - remote, hybrid, or based at an Esko location. Worldwide locations considered. Function: Software Engineering Reports to: Team Leader, Esko AI About the role Esko's products handle sensitive customer content and support business-critical workflows. AI-powered and agentic systems introduce additional security challenges because they combine access to sensitive data, specialized tools, and potentially consequential actions within those workflows.

We are building shared security foundations for Esko's AI Platform so product teams can develop AI capabilities without implementing critical controls independently. As part of the platform team, you will help shape and build these foundations, taking end-to-end ownership of substantial security areas.

You will collaborate closely with Esko's cloud platform teams, security engineers, compliance specialists, and product engineering teams to develop controls that are secure, practical, and reusable across products.

This is a hands-on engineering role, not a compliance or review position.

What you will do

• Help shape the AI Platform's security architecture and take end-to-end ownership of substantial security components.
• Design and build identity, authorization, delegated-access, and policy-enforcement controls for AI systems, including tenant-, user-, document-, and tool-level permissions.
• Secure retrieval, tool use, and execution against prompt injection, unauthorized actions, data leakage, and other AI-specific threats.
• Design controls proportionate to the risk of an action, including approval gates, isolation, execution limits, and recovery mechanisms.
• Build audit and monitoring capabilities so security-relevant activity is traceable and high-risk behavior can be detected, investigated, and routed for appropriate review.
• Conduct threat modelling and adversarial testing, translating findings into shared platform controls and secure defaults for product teams.
• Work with cloud platform teams, security engineers, compliance specialists, and product engineering teams to integrate controls that satisfy Esko's security obligations while remaining practical to adopt and operate.

What we are looking for

• Strong software engineering experience designing, building, and operating secure production systems in Python, TypeScript, or a similar language.
• At least 5 years’ experience in a software engineering role with experience securing cloud, distributed, or platform services, including authentication, authorization, policy enforcement, and multi-tenant isolation.
• Practical experience with threat modelling, application security testing, and turning identified risks into effective engineering controls.
• Experience designing or building systems using LLMs, retrieval-augmented generation, or agents, with an understanding of their distinctive security failure modes.
• Experience building reusable platform controls, APIs, or shared services used by multiple engineering teams.
• Sound judgement in balancing security, usability, and operational complexity, including recognizing when stronger isolation or human approval is required.
• Ability to communicate security decisions and tradeoffs clearly across engineering, security, compliance, and product stakeholders.
• Undergraduate, Master’s degree or PhD in Computer Science / Machine Learning / Data Science / Artificial Intelligence, or related disciplines.
• Excellent written and verbal communication, with the ability to work fluently with both technical and business stakeholders alike.

Preferred experience

• Multi-tenant enterprise SaaS platforms.
• Permission-aware retrieval systems.
• Tool-calling systems or workflow automation.
• Adversarial testing or security evaluation for AI systems.
• Sandboxing untrusted files or code.
• MCP or similar tool-integration protocols.
• Document, graphics-processing, or other content-centric platforms.

What success looks like

• Agents operate with scoped permissions.
• Sensitive actions require appropriate approval.
• Retrieval respects customer access boundaries.
• Agent activity is fully auditable.
• Automated means are in place to detect high-risk activities which are alerted for further review.
• Product teams adopt shared security controls.
• Secure AI features reach production faster.

At Veralto, we value diversity and the existence of similarities and differences, both visible and not, found in our workforce, workplace and throughout the markets we serve. Our associates, customers and shareholders contribute unique and different perspectives as a result of these diverse attributes.

Unsolicited Assistance We do not accept unsolicited assistance from any headhunters or recruitment firms for any of our job openings. All resumes or profiles submitted by search firms to any employee at any of the Veralto companies, in any form without a valid, signed search agreement in place for the specific position, approved by Talent Acquisition, will be deemed the sole property of Veralto and its companies. No fee will be paid in the event the candidate is hired by Veralto and its companies because of the unsolicited referral. Thank you for your interest. Please read our Applicant Data Privacy Notice carefully here.