Security Engineering & Automation
•Design and implement security automation frameworks for threat detection, remediation, and compliance validation across cloud and application layers
•Develop tools and scripts to enhance security visibility across AI model pipelines, APIs, and data integrations
•Integrate security controls into CI/CD workflows, including SAST, DAST, SCA, and IaC scanning
•Lead periodic VAPT (Vulnerability Assessment & Penetration Testing) for web apps, mobile apps, agentic AI platforms, and connected services
Cloud & Infrastructure Security
•Secure AWS environments using native and third-party tooling
•Build and maintain IaC security baselines with automated configuration drift detection
•Configure and manage WAF rules for DDoS mitigation and bot protection
•Enforce secrets management, IAM policies, and container security best practices across production workloads
AI & Data Security
•Collaborate with engineering teams to remediate vulnerabilities and enforce secure SDLC practices
•Conduct internal security training and phishing simulations
•Apply AI model security and data privacy principles to protect sensitive data flows
Compliance & Governance
•Contribute to the implementation and maintenance of ISO 27001, SOC 2, DPDPA, and PCI DSS controls
