DevSecOps & Product Security Engineer

About the role

We're hiring a hands-on DevSecOps & Product Security Engineer to embed security across the software development and deployment lifecycle — spanning application security, cloud security, and DevSecOps practice for modern SaaS and AI-enabled platforms. A key focus area is Stratpilot, our AI-powered business platform integrating with enterprise systems such as email, calendars, documents, CRM tools, and internal data sources.

What you'll do

• Secure Development & Application Security
• Implement security checks, scanning, and quality gates across the SDLC, and champion secure coding and remediation practices
• Review authentication, authorization, APIs, tenant isolation, and access controls — identifying and mitigating OWASP and API security risks through threat modelling
• Assess AI agents, prompts, connectors, and data-access risks, protecting against prompt injection, data leakage, tool misuse
• Secure Google Cloud environments — IAM, service accounts, networking, secrets, and workloads — enforcing least privilege and environment separation

What you need

• 4–7 yrs of experience
• OWASP
• IAM
• Python
• CI/CD
• GCP
• Vulnerability assessment
• Any graduate

Good to have

• SIEM
• ISO 27001
• ETL
• PostgreSQL
• LLMs
• Terraform

What you get

• ₹4 L–₹15 L a year