Senior Security Engineer - Cloud & AI Platform

Ema Unlimited; Bengaluru; On-site; INR 4,500,000 - 7,000,000; Full time

Job summary

Ema Unlimited is seeking a Senior Security Engineer to safeguard the Cloud & AI Platform across multi-tenant environments. You will design and enforce security controls for agents, models, and integrations, focusing on zero-trust, data isolation, and secure CI/CD pipelines.

You will collaborate with Engineering and Product to evolve security baselines for Kubernetes, cloud infrastructure, and AI tooling, while driving automated testing and threat modeling in a fast-moving AI-first company.

Qualifications

• 5+ years in cloud security, application security, or DevSecOps (GCP/Azure Preferred).
• Deep hands-on Kubernetes and cloud security experience.
• Security automation with IaC (Terraform/Helm) and Python or Bash.
• Understanding of LLM application risks (OWASP Top 10 for LLM Applications).
• Comfortable influencing engineers without formal authority.

Responsibilities

• Threat model new AI agent features before launch: prompt injection, jailbreaks, data exfiltration, over-privileged tool use.
• Design guardrails for agentic workflows: least-privilege tool scopes, human-in-the-loop approvals, output filtering.
• Enforce tenant and data isolation across retrieval, context stores, and model calls.
• Secure the AI supply chain: model/provider vetting, MCP servers/connectors, prompt/versioning.
• Run AI red-team exercises and build automated adversarial tests into CI.

Skills

Cloud security

Application security

DevSecOps

Kubernetes

IaC automation

Python or Bash

LLM security awareness

Influencing engineers

Tools

Terraform

Helm

Job description

Senior Security Engineer - Cloud & AI Platform

Location

India

Address

India - Bengaluru

Employment Type

FullTime

Department

Engineering

Overview Application

About Ema

Ema builds AI Employees for HR, IT and Finance. Our AI Employees take on the busy work across the employee experience, from recruiting, onboarding and benefits to IT support, invoice processing and payroll, so people can spend their time on work that needs them. Founded by former executives from Google, Coinbase, Flipkart, and Okta, our team includes engineers from premier tech companies and graduates of Stanford, MIT, UC Berkeley, CMU, and IITs.
We are backed by industry leading investors including Accel, Naspers/Prosus, Creaegis, Section32, and angels like Sheryl Sandberg and Dustin Moskovitz. Headquartered in Silicon Valley and with offices in London, Bangalore and Vancouver, Ema is at the frontier of what Agentic AI can do in production. We ship real systems that run real business processes at scale.

Ema builds AI agents that act on sensitive enterprise data and systems. You ll make sure the agents, and the platform they run on, are secure by design. You ll build security controls for autonomous agents operating across multi-tenant enterprise environments, including cloud, on-prem and air-gapped deployments. You ll solve zero-trust problems where the code isn t static logic but non-deterministic models making live API calls against sensitive customer data. Our agents orchestrate 100+ LLMs, call third-party tools through MCP, execute code in sandboxes and drive headless browsers, and each of those is an attack surface you ll help define.

Role Overview

What you ll own

AI and agent security

• Threat model new AI agent features before launch: direct and indirect prompt injection, jailbreaks, data exfiltration through agent outputs, and over-privileged tool use

• Design guardrails for agentic workflows: least-privilege tool and connector scopes, human-in-the-loop approvals for high-risk actions, and output filtering

• Enforce tenant and data isolation across retrieval (RAG), context stores, and model calls, so no customer s data leaks into another s context

• Secure the AI supply chain: model and provider vetting, third-party MCP servers and connectors, prompt and config versioning

• Run AI red-team exercises and build automated adversarial tests (prompt injection suites) into CI

Cloud and platform security

• Security baselines for Kubernetes and cloud infrastructure: RBAC, network policies, workload identity, secrets management, per-tenant network isolation

• Security in CI/CD: IaC scanning, SAST and dependency scanning, policy-as-code guardrails

What you ll contribute to

• AI-aware detection with our current technology and tooling: logging prompts, tool calls and agent actions, and alerting on anomalous agent behavior

• Partner with the Security & Compliance Lead on technical controls and evidence for SOC 2 Type II, ISO 27001, HIPAA and ISO 42001, plus the NIST AI RMF

Must-haves

• 5+ years in cloud security, application security, or DevSecOps (GCP/Azure Preferred)

• Deep hands-on Kubernetes and cloud security experience

• Security automation with IaC (Terraform/Helm) and Python or Bash.

• A working understanding of LLM application risks (OWASP Top 10 for LLM Applications) and how agentic systems fail

• Comfortable influencing engineers without formal authority

Nice-to-haves

• Hands-on experience securing LLM, RAG, or agentic systems in production

• AI red teaming, or familiarity with MITRE ATLAS

• CNAPP/CSPM tooling, SIEM/detection engineering

• Contributions to AI security research, open-source tools, or CTFs

Why Join Ema

• At the frontier of AI: Secure agentic systems that are driving real enterprise transformation.

• Security is the product: Enterprise CISOs evaluate our security before they buy. Here it s a core feature, not a checkbox.

• Security as a peer, not a gate: You ll report to the Security & Compliance Lead and partner directly with Engineering and Product leadership. You ll sit in design reviews from day one and have a real say in what ships.

• Ownership: Help set the baseline for enterprise trust in AI agents and shape the security DNA of a category-defining company.

• Elite talent: Work with engineers and researchers from top-tier tech companies who value deep execution

Emas Culture & Values

• High Bar on Quality: We value excellence and expect world-class execution.

• Ownership & Accountability: We take full responsibility for our work and outcomes.

• Impact-Driven Approach: We set ambitious goals and measure success through real-world impact.

• No Hierarchy, Just Execution: Everyone is an individual contributor focused on delivering results.

Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits.

Ema Unlimited is an equal opportunity employer and is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or genetics.