Senior Cybersecurity Engineer - India

Cornerstone OnDemand; Mumbai; Hybrid; INR 400,000 - 700,000; Full time

Job summary

Cornerstone OnDemand, in Mumbai, seeks a Senior Cybersecurity Engineer to lead hands-on security across the SDLC for AI/LLM based applications. The role focuses on white box testing, threat modelling, security assessments, and remediation of vulnerabilities across cloud environments and SaaS platforms.

The candidate will coordinate security activities, stay current with vulnerabilities, and drive secure coding practices within a dynamic, hybrid work setup.

Qualifications

• Bachelor’s degree in an Information Technology related field or equivalent experience.
• 6+ years of experience in application security.
• Knowledge of AI and LLM-based security.
• Familiarity with OWASP Top 10 for LLM applications.
• Understanding of web applications, HTTP and security principles.
• Experience with SDLC tools: static/dynamic analysis, open-source management, container security, threat modelling.

Responsibilities

• Maintain security tools and processes for cloud environments (AWS, GovCloud, GCP).
• Perform white box security testing to validate application security.
• Conduct security assessments and code reviews across development stages.
• Define and enforce security measures for AI/LLM based apps and evaluate security tools.
• Monitor vulnerabilities and maintain remediation history.
• Explain findings to owners and provide mitigation recommendations.
• Lead incident response for AI/LLM security breaches.
• Perform threat modelling and risk analysis for new/existing apps.

Skills

Application security

AI/LLM security

Threat modelling

White box security testing

Security assessments

Vulnerability remediation

HTTP/Web security

Secure coding practices

Education

Bachelor’s degree (IT related)

Tools

Git

Jenkins

Static code analysis

Dynamic code analysis

OWASP Top 10

Container security

Job description

This role is Hybrid, Mumbai Office. Also available in Pune, India.

Senior Cybersecurity Engineer (India)

The Senior Cybersecurity Engineer position is a hands‑on role that involves evaluating and enforcing application security in all phases of the Software Development Life Cycle (SDLC). This position will work closely with our security and engineering teams on conducting white box security testing, threat modelling, security assessments and support the identification, interpretation, and remediation of vulnerabilities across a variety of applications, programming languages, and platforms. The candidate should have a strong background in application security, coupled with deep knowledge of AI technologies and LLMs, to protect our applications from potential security threats.

In this role you will…

• Maintain security tools/processes to effectively secure our cloud-based environments and applications (AWS, GovCloud, GCP).
• Conduct white box security testing to assess and validate application security.
• Conduct security assessments and code reviews of applications in various stages of development.
• Define, maintain, and enforce application security measures for AI and LLM based applications and evaluate application security tools to improve our detection and prevention capabilities.
• Monitor and track progress of found vulnerabilities and maintain the history.
• Explain and demonstrate vulnerabilities to application/system owners, and provide recommendations for mitigation.
• Issue reports on assigned application and system scans.
• Continuously monitor and evaluate the security posture of AI/LLM applications and lead incident response efforts for security breaches related to AI and LLM applications.
• Perform threat modeling exercises and risk analysis for new and existing applications.
• Research and stay up to date with the latest security vulnerabilities and best practices.

You’ve got what it takes if you have…

• Bachelor’s degree in an Information Technology related field of study or equivalent post high school education and/or work-related experience.
• 6+ years of experience in application security.
• Knowledge of application security focused on AI and LLM-based applications.
• Knowledge of OWASP Top 10 for LLM applications.
• Knowledge of information security principles, web applications, and a level of familiarity with malicious code and common techniques used by hackers.
• Experience with common SDLC tools: static and dynamic code analysis, open-source management, container security, threat modeling, etc.
• Experience with HTML and JavaScript along with a solid understanding of HTTP protocol.
• Experience coordinating penetration testing activities and performing penetration testing.
• Experience with CI/CD practices and tools (Git, Jenkins) and integrating security solutions into CI/CD pipelines is a plus.
• Experience creating solutions in C#, Python, Node.JS, or Go, and Infrastructure as Code (CloudFormation) is a plus.
• Knowledge of microservices architectures is a plus.
• Experience working on security responsibilities for a SaaS or PaaS solutions, preferably in AWS is a plus.
• Basic knowledge of SQL and prior experience with programming in one or more server-side technologies such as ASP.NET Core is a plus.
• Thorough understanding of SDLC and software security maturity models such as BSIMM or OWASP SAMM is a plus.
• Experience conducting secure code development training is a plus.
• Knowledge of cryptographic tools and/or security APIs is a plus.
• Experience interacting with security vendors and customers is a plus.

Our Culture:

Spark Greatness. Shatter Boundaries. Share Success. Here, right now, is where the future of work is happening — where curious disruptors and change innovators help communities and customers enable everyone, anywhere, to learn, grow and advance, to be better tomorrow than they are today.

Who We Are:

Cornerstone powers the potential of organizations and their people to thrive in a changing world. Cornerstone Galaxy, the complete AI-powered workforce agility platform, meets organizations where they are. More than 7,000 organizations and 100 million+ users in 180+ countries and in nearly 50 languages use Cornerstone Galaxy to build high-performing, future-ready organizations and people today.

Equal Employment Opportunity has been, and will continue to be, a fundamental commitment at Cornerstone OnDemand. We are proud to be an EOE Protected Veterans/Disability workplace and an affirmative action employer.