Senior Security Engineer - Cloud & AI Platform

Ema; Bengaluru; Sur place; INR 3 500 000 - 5 500 000; Plein temps

Résumé du poste

Ema is building the Universal Agentic Control Plane in Bengaluru to enable enterprises to govern AI agents at scale. This role focuses on securing agent workflows, cloud infrastructure, and the AI supply chain while collaborating with engineering and product teams.

You will influence security practices across SOC2, ISO, and NIST aligned programs and help shape enterprise-grade agent security culture. Join a fast-growing team driving security-first AI agent platforms for major customers, with

Qualifications

• 5+ years in cloud security, application security, or DevSecOps (GCP/Azure preferred).

Responsabilités

• Threat model new AI agent features before launch: prompt injection, jailbreaks, data exfiltration risks.
• Design guardrails for agentic workflows: least-privilege tool scopes and approvals.
• Enforce tenant/data isolation across retrieval, context stores, and model calls.
• Secure the AI supply chain: vendor vetting and versioning.
• Run AI red-team exercises and automated adversarial tests into CI.

Connaissances

Kubernetes security

Cloud security

DevSecOps

Python or Bash

LLM risk understanding

Influence without authority

Formation

Bachelor's degree in CS/Engineering

Outils

Terraform

Helm

Bash/Python scripting

Description du poste

Ema is building the Universal Agentic Control Plane, the platform enterprises use to build, govern, deploy and observe AI agents at scale. Our agents run real workflows across HR, customer experience, finance, sales and documents. They connect to 250+ enterprise systems, from HR and CRM platforms to ITSM and ERP systems, and they are deployed with leading global systems integrators and BPO partners. Ema was founded by leaders from Google, Coinbase and Okta, is backed by top-tier venture and strategic investors, and is based in Silicon Valley and Bangalore.

About the Role

Responsibilities

What you’ll own

AI and agent security

• Threat model new AI agent features before launch: direct and indirect prompt injection, jailbreaks, data exfiltration through agent outputs, and over-privileged tool use
• Design guardrails for agentic workflows: least-privilege tool and connector scopes, human-in-the-loop approvals for high-risk actions, and output filtering
• Enforce tenant and data isolation across retrieval (RAG), context stores, and model calls, so no customer’s data leaks into another’s context
• Secure the AI supply chain: model and provider vetting, third-party MCP servers and connectors, prompt and config versioning
• Run AI red-team exercises and build automated adversarial tests (prompt injection suites) into CI

Cloud and platform security

• Security baselines for Kubernetes and cloud infrastructure: RBAC, network policies, workload identity, secrets management, per-tenant network isolation
• Security in CI/CD: IaC scanning, SAST and dependency scanning, policy-as-code guardrails

What you’ll contribute to

• AI-aware detection with our current technology and tooling: logging prompts, tool calls and agent actions, and alerting on anomalous agent behavior
• Partner with the Security & Compliance Lead on technical controls and evidence for SOC 2 Type II, ISO 27001, HIPAA and ISO 42001, plus the NIST AI RMF

Qualifications

• 5+ years in cloud security, application security, or DevSecOps (GCP/Azure Preferred)

Required Skills

• Deep hands-on Kubernetes and cloud security experience
• Security automation with IaC (Terraform/Helm) and Python or Bash.
• A working understanding of LLM application risks (OWASP Top 10 for LLM Applications) and how agentic systems fail
• Comfortable influencing engineers without formal authority

Preferred Skills

• Nice-to-havesHands-on experience securing LLM, RAG, or agentic systems in production
• AI red teaming, or familiarity with MITRE ATLAS
• Contributions to AI security research, open-source tools, or CTFs

Why Join Ema?

• At the frontier of AI: Secure agentic systems that are driving real enterprise transformation.
• Security is the product: Enterprise CISOs evaluate our security before they buy. Here it’s a core feature, not a checkbox.
• Security as a peer, not a gate: You’ll report to the Security & Compliance Lead and partner directly with Engineering and Product leadership. You’ll sit in design reviews from day one and have a real say in what ships.
• Ownership: Help set the baseline for enterprise trust in AI agents and shape the security DNA of a category-defining company.
• Elite talent: Work with engineers and researchers from top-tier tech companies who value deep execution

Ema's Culture & Values

• High Bar on Quality: We value excellence and expect world-class execution.
• Ownership & Accountability: We take full responsibility for our work and outcomes.
• Impact-Driven Approach: We set ambitious goals and measure success through real-world impact.
• No Hierarchy, Just Execution: Everyone is an individual contributor focused on delivering results.

Ema Unlimited is an equal opportunity employer and is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or genetics.