Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Lyzr, Inc is seeking a Senior Cyber Security Auditor to join its Security Audit Team. You will lead platform and AI tech stack audits, assess cloud security in AWS and Azure, and act as a 2LOD oversight body for security controls. Strong written communication to executives is essential.
Ideal candidates have 5+ years in security auditing within high-growth SaaS or fintech, with CISSP/CISA/CCSP or equivalent credentials and experience with tools like Wiz, Snyk, Prisma Cloud, and Burp Suite.
Lyzr is a Series A–backed enterprise AI company building a full-stack agent infrastructure platform that helps organizations design, deploy, and govern AI agents. Our platform enables enterprises to move beyond isolated AI use cases and into reliable, production‑grade agentic workflows with strong controls around security, accuracy, and compliance.
Recognized by Accenture and Harvard Business School–led innovation ecosystems, Lyzr works with global enterprises to reimagine complex workflows using agentic AI. We focus on making AI agents dependable at scale - so teams can replace fragmented tool stacks with a unified, governed intelligence layer.
As Lyzr accelerates its growth across enterprise banking, financial services, and highly regulated industries, establishing robust, independent technical governance is critical. We are seeking a Senior Cyber Security Auditor to join our newly formed Security Audit Team.
1. Platform & AI Tech Stack Auditing (2LOD)
Conduct continuous static and dynamic security assessments (SAST/ DAST/ IAST) across Lyzr’s core codebases, API layers, and multi‑tenant microservices.
Audit AI agent orchestration workflows, evaluating prompt security, token limits, access boundary controls, and agent execution logs to prevent unauthorized data access or non‑deterministic behavior.
Perform regular penetration testing and threat modeling across internal and external endpoints.
2.Cloud Infrastructure & Configuration Audit
Continually audit and monitor Lyzr’s primary AWS cloud environment (IAM, KMS, Security Hub, GuardDuty, VPC networking) and secondary Microsoft Azure footprints for misconfigurations, excessive permissions, or infrastructure drift.
Validate container and cluster security posture across Kubernetes/Docker deployment pipelines and automated CI/CD workflows.
3. Governance, Oversight & Risk Escalation
Function as an objective 2LOD oversight body, reviewing and validating the security controls, code practices, and remediation efforts executed by 1LOD engineering and IT teams.
Log, track, and maintain an independent technical risk register, providing direct, uncompromised reporting and quarterly audit updates to the COO.
Support external SOC 2, ISO 27001, and regulatory readiness by maintaining rigorous, audit‑ready operational logs and control evidence.
5+ years of hands‑on experience in technical security auditing, red teaming, penetration testing, or 2LOD security risk engineering within high‑growth SaaS, fintech, or cloud platforms.
Cloud Platform Expertise: Deep technical mastery of AWS security architecture (Identity, KMS, Network Isolation, CloudTrail) with solid working proficiency in Microsoft Azure security controls.
AI & Platform Security: Strong understanding of emerging AI attack vectors (e.g., prompt injection, data exfiltration via agents, insecure output handling) and familiarity with safety frameworks such as the OWASP Top 10 for LLMs.
Tooling Proficiency: Hands‑on experience with modern security auditing software (e.g., Wiz, Snyk, Prisma Cloud, SonarQube, Burp Suite, AWS Inspector).
Communication & Objectivity: Exceptional technical writing and communication skills, with the ability to articulate complex security risks directly to executive leadership while maintaining constructive, independent relationships with 1LOD engineering leads.