Security Engineer – AI/ML/DevSecOps / Application Security

About the role

We are seeking an experienced Security Engineer with expertise in AI/ML, DevSecOps, and Application Security to strengthen security across software development lifecycles. This role emphasizes hands-on delivery of SAST, SCA, and DAST integration in CI/CD pipelines, application security assessments, and secure-by-design practices for cloud-native and enterprise applications.

Key responsibilities

• Integrate and optimize security tools like SAST, SCA, and DAST within CI/CD pipelines to automate testing and enforce quality gates.
• Conduct comprehensive security assessments including static, dynamic, open-source dependency, and API security testing with actionable remediation guidance.
• Collaborate with development and DevOps teams to embed secure coding practices, perform threat modeling, and drive remediation efforts.
• Implement DevSecOps controls such as IaC scanning, secrets detection, container and Kubernetes security, and enforce policy-as-code.
• Design and develop AI-driven automation workflows for AppSec tasks including vulnerability triage and secure code review assistance while ensuring safe-guards and human oversight.

Required skills and experience

• 8+ years of experience in application security with strong hands-on expertise in SAST, SCA, and DAST tool integration and management.
• Proficiency in automating and scaling security testing within CI/CD environments including quality gates and exception workflows.
• Experience performing API security testing covering authentication, authorization, and OWASP Top 10 risks.
• Strong scripting skills (e.g., Python, Bash) to automate security tasks and integrate with reporting systems.
• Knowledge of DevSecOps practices including infrastructure as code scanning, secrets management, container security, and policy-as-code implementation.
• Ability to lead security architecture reviews, threat modeling, and risk prioritization for modern applications and AI/ML systems.

Nice to have

• Familiarity with software supply-chain security practices including SBOM generation and artifact provenance verification.
• Experience designing and deploying AI agents or agentic workflows specifically for application security automation.
• Exposure to secure SDLC standards aligned with frameworks like OWASP ASVS.
• Understanding of emerging threats and security challenges in AI-enabled applications and workflows.

Location

Hyderabad, Telangana, India