Cybersecurity Agent Developer at IT Clients · Bengaluru (Bangalore) · 7 - 14 years · ₹10L - ₹25L / yr · Posted 22 Jul 2025

Job Title: Cybersecurity Agent Developer
Location: Bengaluru, India
Experience: 7+ Years
Employment Type: Full-time
About the Role:
We are seeking a highly skilled Cybersecurity Agent Developer with deep expertise in C/C++ and Golang or Rust to build and optimize high-performance security agents for Windows, Linux, and macOS platforms. This role requires a strong background in low-level system programming, performance tuning, and security-centric design to ensure effective monitoring, threat detection, and system protection across diverse environments.
Key Responsibilities:
- Design, develop, and maintain cross-platform endpoint security agents.
- Optimize agent performance to ensure minimal system overhead and real-time responsiveness.
- Implement system-level hooks and monitoring components including:
- Process monitoring
- File system and network activity tracking
- System telemetry collection
- Work with kernel-level APIs and frameworks, such as:
- ETW, WFP, WMI, MiniFilter (Windows)
- eBPF, auditd, fanotify, netfilter (Linux)
- EndpointSecurity framework, XPC, System Extensions (macOS)
- Build robust, secure inter-process communication (IPC) and data serialization mechanisms.
- Integrate agents with cloud-based security platforms via REST APIs, gRPC, and TLS.
- Collaborate with internal teams (threat intelligence, detection, response) to evolve agent capabilities.
- Perform in-depth debugging, profiling, and optimization using industry-standard tools.
Required Skills & Experience:
Core Programming:
- Strong proficiency in C/C++ and either Golang or Rust
- Solid experience in multi-threaded and asynchronous programming
Platform Expertise:
- Proven experience developing for Windows, Linux, and macOS
- Deep knowledge of system-level programming, including:
- Windows: WinAPI, ETW, WFP, WMI, MiniFilter
- Linux: eBPF, auditd, fanotify, netfilter
- macOS: EndpointSecurity framework, XPC, System Extensions
Security & Networking:
- Understanding of secure IPC, TLS, gRPC, and secure coding practices
- Familiarity with system hardening and secure memory management
Debugging & Optimization Tools:
- Proficient in using tools like GDB, LLDB, Valgrind, Perf, Wireshark, Sysinternals Suite
Version Control:
- Strong experience with Git (GitHub, GitLab)
Preferred Qualifications:
- Experience with cybersecurity frameworks like MITRE ATT&CK, Sysmon, YARA, Suricata
- Hands-on exposure to kernel/driver development
- Familiarity with EDR/XDR, sandboxing, and SIEM integrations
- Understanding of malware analysis and threat detection techniques
- Exposure to container security and cloud-native security agent development

Similar jobs (10)
Cybersecurity Engineer – AI Training Project
About the Opportunity
We’re looking for experienced Cybersecurity Engineers to contribute technical expertise to a customer project focused on improving the capabilities of next-generation AI systems.
In this role, you’ll use your real-world experience in cybersecurity, software engineering, vulnerability assessment, and secure development to create high-quality technical inputs that help AI systems better understand, debug, secure, and reason about complex software.
What You’ll Do
- Analyze, debug, and resolve software bugs, vulnerabilities, and security issues across complex codebases.
- Review source code and identify potential security weaknesses, vulnerabilities, and attack vectors.
- Perform security assessments, vulnerability assessments, penetration testing, and codebase audits.
- Develop and modify software using languages such as Python, Java, Rust, Go, C++, or TypeScript.
- Implement new features and fix existing functionality while maintaining strong security and engineering standards.
- Refactor legacy code to improve security, maintainability, reliability, and performance.
- Work on backend systems and help optimize applications for scalability, performance, and security.
- Analyze real-world security scenarios and translate your expertise into high-quality technical examples and problem-solving tasks.
- Document technical findings, vulnerabilities, debugging approaches, and recommended solutions.
- Provide domain expertise that helps improve how AI systems reason about software engineering and cybersecurity problems.
What We’re Looking For
- Strong professional experience in Cybersecurity / Application Security / Product Security / DevSecOps / Penetration Testing / Vulnerability Management.
- Strong programming experience in one or more of:
- Python
- Java
- Rust
- Go
- C++
- TypeScript
- Proven experience with debugging, troubleshooting, and fixing complex software issues.
- Hands-on experience with penetration testing, vulnerability assessment, security auditing, or application security.
- Understanding of secure software development practices and modern security threats.
- Strong knowledge of data structures, algorithms, software architecture, and code quality.
- Ability to review unfamiliar codebases and quickly understand how systems work.
- Strong written communication and the ability to explain complex technical findings clearly.
Nice to Have
- Experience with OWASP, API security, cloud security, DevSecOps, or threat modeling.
- Experience performing security assessments on production applications or enterprise systems.
- Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, SAST/DAST tools, or vulnerability scanners.
- Contributions to open-source security or software projects.
- Experience working with AI/ML systems, LLMs, data annotation, or AI training projects.
- Relevant security certifications such as OSCP, OSWE, CEH, CISSP, Security+, or equivalent practical experience.
Engagement
- Role: Cybersecurity Engineer
- Work: Remote(Contract)
- Experience: Mid-level to Senior
- Programming: Required
- Cybersecurity expertise: Required
Why Join?
This is an opportunity to apply your existing cybersecurity expertise to an emerging area of technology. Your practical experience debugging software, identifying vulnerabilities, securing applications, and solving complex engineering problems will directly contribute to improving the capabilities of next-generation AI systems.
If you enjoy breaking down complex technical problems, finding vulnerabilities, fixing software, and thinking deeply about how systems work, this project could be a strong fit.
Responsibilities
· Build and operate the agentic loop: trigger → orchestration → agent execution → output to JIRA → human accept/reject → next agent, across design, coding, review, and testing agents.
· Implement model routing and retry logic across a provider-agnostic model layer (e.g., Claude via AWS Bedrock, self-hosted or alternative models as cost/sovereignty hedges), including business-continuity fallback if a given provider becomes unavailable.
· Own token cost control and context window management — per-agent and per-run budgets, circuit breakers that halt runaway execution, and cost observability tied back to JIRA.
· Stand up and maintain observability, alerting, and monitoring across the agent fleet (e.g., Langfuse or equivalent), so agent health, cost, and quality are visible in real time.
· Implement agent governance and safety guardrails: deterministic pre/post hooks gating every LLM call, kill switches, prompt injection prevention and mitigation, and audit logging.
· Integrate the harness with JIRA as the system of record and other business systems as needed, ensuring every agent action, decision, and human override is tracked with no side channels.
· Pair directly with client engineers throughout — this is capability transfer, not black-box delivery. You'll document, demo, and hand over as you build.
· Work in outcome-based delivery stages (spike → architecture sign-off → build → pilot) with gated milestones tied to working software demos, not fixed artifact checklists.
· Participate actively in team discussion and design decisions — this team expects engineers to challenge ideas constructively and speak up, not defer silently.
Must-Have Experience
· Hands-on production experience building agentic systems(not tutorial-level or personal-project experience.) Candidates should be able to speak concretely about systems they've shipped.
· Practical experience with agentic frameworks such as LangChain, LangGraph, or equivalent orchestration frameworks.
· Experience with LLM orchestration and model routing across multiple providers/models, including fallback and retry design.
· Working knowledge of agent governance: guardrails, human-in-the-loop approval flows, kill switches, and audit trails.
· Practical understanding of prompt injection risks and mitigation techniques.
· Experience with token cost management and context window/memory handling at production scale — this is a named governance requirement for the engagement, not a nice-to-have.
· Strong Python (or equivalent) engineering background, comfortable working in AWS environments (Bedrock/AgentCore exposure a strong plus).
· Experience with observability/monitoring tooling for distributed or agentic systems (e.g., Langfuse, Datadog, or equivalent).
· Comfortable working with JIRA/Atlassian APIs or similar ticketing-system-of-record integrations.
Nice to Have
· Direct experience with AWS Bedrock AgentCore, Temporal (or similar workflow orchestration), or LiteLLM-style model gateways.
· Exposure to Cursor or other AI-native IDEs in a production engineering context.
· Experience with self-hosted open-weight models (e.g., DeepSeek, GLM) as cost or sovereignty hedges alongside commercial APIs.
· Financial services or other regulated-industry background.
· Familiarity with Claude Code, Claude Cowork, or Claude Skills.
Qualifications
· Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
· 3-5+ years in software/platform engineering, with a meaningful portion of that time specifically on agentic or LLM-orchestration systems (not general ML or data engineering alone).
Relevant Experience
· Already built this kind of system and can talk through the trade-offs from experience, not theory.
· Comfortable operating with ambiguity - technology choices (frameworks, specific models, tooling) are expected to evolve during the engagementand milestones are tied to outcomes rather than fixed deliverables.
· Will contribute opinions - quiet execution without a point of view is not a fit for this team.
Location: Pune/Bengaluru
As a Senior Software Engineer, you will tackle a highly challenging role within our Cyber Security Engineering integration development team. You will be responsible for the End-to-End (E2E) delivery of projects from gathering customer requirements to deploying high-performance data exchange solutions on-prem or in the cloud. We are looking for a Systems-Level Thinker who can seamlessly transition between building complex integrations and architecting high-throughput, low-latency backends. Because each integration may require a different technical approach, we value engineers who love reskilling, following agile best practices, and maintaining an evolving mindset.
Core Responsibilities
Technical Leadership and Architecture
● Systems Engineering: Design, build, and optimize high-throughput, low-latency backend systems and data-exchange layers.
● Architecture and Integration: Participate in planning, defining, and exploring solution alternatives. Architect and estimate deep technical custom solutions and integrations across diverse enterprise tech stacks. ● Stream Processing: Implement event-driven architectures, manage backpressure, and handle real-time state management across security platforms.
● Delivery Ownership: Own projects end-to-end, defining and implementing enablers to evolve solution intent directly alongside our Agile teams.
Team Leadership and Quality
● Mentorship: Actively lead, coach, and mentor junior developers, providing technical guidance to foster professional development.
● Engineering Excellence: Oversee code reviews, build robust CI/CD pipelines, enforce strict quality checks, and ensure rigorous adherence to coding standards.
● Agile Execution: Actively participate in Agile development, including writing, breaking down, and estimating User Stories.
Customer and Stakeholder Collaboration
● Customer Delight: Maintain a strong customer-first attitude while designing, building, and deploying products.
● Technical Communication: Articulate complex technical trade-offs clearly to both business stakeholders and engineering teams.
● Pipeline Management: Manage customer relationships effectively to ensure a continuous flow of project scope, maintaining clear team backlogs.
Job Requirements
● Experience: 5+ years of proven software engineering experience, with a track record of leading small engineering teams or mentoring junior devs.
● High-Throughput Backend Focus: 5+ years of experience engineering robust, real-time backends specifically using Go (Golang) or Java.
● Polyglot and Integration Capability: Deep expertise in at least one or two additional languages/frameworks from our ecosystem: Python, TypeScript, Node.js, React.js, Angular, C#, or C++.
● Computer Science Fundamentals: Excellent knowledge of complex Data Structures, algorithms, and their correct situational usage.
● Adaptability: A passionate programmer who is genuinely open and excited to learn new software development skills as required by changing project demands.
Bonus / Added Advantages
● AI & Intelligent Automation: Hands-on knowledge of AI concepts, Large Language Models (LLMs), and experience building or integrating AI agents to automate complex workflows or security processes.
● Cybersecurity Domain: Experience in the cybersecurity space (SIEM, SOAR, or platform security).
● Modern Web Tech: Strong experience in developing software using modern web technologies.
● E2E Lifecycle: Proven background handling a project completely from discovery to cloud/on-prem deployment.
● Open Source: Active contributions to the Open Source community. (Please share your GitHub/GitLab links in your application!)
About the team
SecurITe’s mission is to build an Agentic‑AI driven security platform that protects critical infrastructure from modern cyber threats. Our focus is on delivering highly performant, resilient, and intelligent network security systems that help defenders stay ahead of adversaries.
About the Role
We’re looking for a Senior Golang Engineer to spearhead the development of our next-generation cybersecurity AI platform. In this role, you will build and scale robust backend systems to solve complex, high-impact technical challenges.
Why This Role Matters
Cybersecurity is undergoing a fundamental shift. AI is no longer an enhancement—it’s becoming the core engine of how detection, investigation, and response are executed. As our Golang Engineer, you will architect and build the backend systems that make this transformation real. Your work will influence not only the evolution of our platform, but also how an entire industry adapts to and leverages AI‑driven security. This is a chance to solve novel technical challenges while shaping how defenders outpace modern attackers.
What You’ll Do
● Design and develop scalable backend services and REST APIs using Golang.
● Architect and maintain microservices-based systems.
● Perform rigorous debugging and system performance optimization.
● Integrate services with Opensearch, Elasticsearch, and Sumo APIs.
● Manage and optimize data interactions with SQL databases.
Impact You’ll Have
● Build the foundational infrastructure that enables real-time AI-driven threat detection.
● Ensure the reliability and performance of critical security systems under high-load scenarios.
● Directly contribute to the resilience of global critical infrastructure by shipping secure and efficient code.
Required Experience
● 4-8+ years of experience in Golang and REST APIs
● Extensive experience in professional backend software development.
● Proven track record of designing and deploying distributed systems at scale.
● Demonstrated experience optimizing performance for data-intensive applications.
● Proven experience leading or architecting large-scale distributed systems and driving technical strategy.
Required Skills & Qualifications
● Expertise in Golang development.
● Deep experience building Backend/REST APIs.
● Proficiency in Python.
● Strong understanding of Microservice architecture.
● Experience with SQL databases.
● Experience with Opensearch, Elasticsearch, or Sumo APIs.
● Strong capabilities in debugging and performance optimization.
Nice to Have
● Knowledge of Identity, Authentication, and Authorization protocols (OAuth, SAML, JWT).
● Experience working in Linux environments.
The Mindset
● Problem Solver: You thrive on complex, ambiguous challenges and engineer elegant solutions.
● Ownership‑Driven: You take initiative, move fast, and deliver outcomes without hand‑holding.
● Continuous Learner: You stay ahead of the curve in AI, ML, and emerging technologies.
● Startup DNA: You excel in fast‑moving environments where priorities evolve and impact is immediate.
Job Title: Chief Agentic Systems Architect
Location: Remote
Type: Contract
ROLE OVERVIEW
We are hiring a Chief Agentic Systems Architect to transform a 10+ year legacy codebase into a high‑velocity, agent‑operable architecture. This role sits at the intersection of software architecture, AI‑agent orchestration, and engineering governance. You will design system patterns, MCP interfaces, and cognitive context layers that allow LLMs and autonomous agents to safely refactor, test, and ship production code with minimal human intervention.
WHAT YOU’LL DO
1. AGENT‑OPERABLE SYSTEM ARCHITECTURE
- Decompose legacy monoliths into agent‑readable, modular systems with strict boundaries and single responsibility
- Lead incremental modernization using the Strangler Pattern, wrapping legacy logic in modern, contract‑driven interfaces
- Enforce SOLID principles, Dependency Injection, and Hexagonal Architecture to ensure deterministic AI execution and low regression risk
2. AGENTIC FRAMEWORK & MCP LEADERSHIP
- Architect and maintain the agent context layer: standardized Skills, Rules, and Commands for AI‑driven engineering workflows
- Build and operate Model Context Protocol (MCP) servers exposing legacy APIs, services, and databases as typed, secure, AI‑consumable tools
- Own contract‑first API design as the primary interface between human intent and autonomous agent execution
3. ENGINEERING GOVERNANCE & AI QUALITY CONTROL
- Act as architectural gatekeeper for AI‑generated pull requests, ensuring scalability, security, and long‑term maintainability
- Mandate test‑driven development (TDD) and characterization testing to preserve legacy behavior during refactoring
- Monitor and optimize agentic reasoning loops to balance cost, speed, and architectural integrity
WHAT WE’RE LOOKING FOR
- 6+ years in software architecture, platform engineering, or technical leadership
- Proven experience modernizing large, undocumented legacy systems
- Deep hands‑on expertise with TypeScript, .NET, and Node.js
- Strong background in API design, distributed systems, and modular architectures
- Practical experience with agentic development, MCP, LLM tooling, or AI‑assisted engineering
- Bias toward clean code, deterministic systems, and production‑grade AI
NICE TO HAVE
- Experience with remote‑first or globally distributed teams
- Background in SaaS transformations, scale‑ups, or private equity-backed environments
- Comfort operating in high‑ambiguity, high‑ownership settings
We are looking for an experienced Developer with experience in compiled languages and ready to work in Golang. You will be responsible for the Development of distributed services GUI and terminal application in Golang. Candidates should have strong understanding of Algorithms, Memory Management and Networking
Required Experience & Skills:
- C/C++/C#/Go/Rust.
- Networking, Database, Linux, Docker.
- Multiprocessing, Multithreading, Distributed computing, Thread synchronization techniques.
- Communication protocols, gRPC, MQTT, REST, Modbus, OPC...
- GUI Programming
- Testing, Debugging and performance optimization.
- REST APIs, MySQL, Redis
- Proficiency with Git for version control and collaborative development workflows.
About us
MyRico builds personal AI agents for enterprise, the copilots and digital employees that make humans more productive. The MyRico agents sit at the intersection of enterprise memory, high-end security, and an ever-expanding set of capabilities. We're a small team shipping fast, and the product is live with real customers today.
The role
Full-time · Bangalore
You'll own the systems that make an autonomous agent trustworthy in production. This is not just prompt engineering, and it's not model training - it's that and all the engineering layers in between: model steering, memory architecture, orchestration design, latency optimization, deterministic vs non-deterministic systems tradeoff, deployment, and operator tooling.
Concretely, the kind of work you'd have done here last week would include enhancing agent memory systems, runtime and scheduling reliability and predictability, adding new capability and tools to deployed agents, operator tools, live system debugging and benchmarking various models for price, latency and quality. And that is just last week. We are a small nimble startup rapidly working to address customer needs in this growing space, so things change rapidly.
What we're looking for
- More than 7 years of software engineering, with real production ownership of distributed or stateful systems - you've been paged for something you built and made it not happen again.
- Strong understanding of LLM based native app building, combining classic and model driven applications to get the best of both. You've built on LLMs beyond demos: agent frameworks, tool use, context management, eval fixtures, and you know why "it worked in the transcript" isn't evidence.
- Python and shell in production settings; comfortable in TypeScript/Node. You write boring, testable code and prefer the standard library to a new dependency.
- Systems taste: append-only logs, idempotent reconciliation, fold-the-events state machines, and read-only debugging surfaces feel like home.
- Evidence discipline: tests before features, claims backed by quoted observations, decisions written down.
Nice to have
- Experience running the combination of multi-tenant and single-tenant / on-prem-style fleets with ability to handle per-customer isolation, upgrade paths, migration compatibility in both setups.
- Security instincts for products that touch highly sensitive data and systems, including things like executives' email, calendars, and messages: least privilege, loopback-only services, secrets that never hit a log.
- You already orchestrate AI coding agents in your own workflow and have opinions about where they break.
How we work
Small team, high trust, written decisions. Designs get adversarial review before code; PRs get automated review driven to zero open findings; features aren't done until verified on a live system. AI agents do a large share of the implementation, your leverage is judgment: framing the problem, freezing the right design, and knowing when the machine is wrong.
At BigThinkCode, we build innovative technology solutions that solve complex enterprise challenges. We are looking for a highly skilled Go/Golang Engineer who thrives in building low-latency, distributed systems and enjoys working on security sensitive platforms.
This role offers the opportunity to work on cutting-edge SaaS platforms, building scalable backend systems that operate in demanding environments requiring high reliability, security, and performance.
Please find below our job description, if interested apply / reply sharing your profile to connect and discuss.
Company: BigThinkCode Technologies
URL: https://www.bigthinkcode.com/
Experience required: 3-6 years
Work location: Chennai
Joining time: Immediate – 4 weeks
Work Mode: Work from office / Hybrid
Must have skills:
- Hands on expertise in Go / Golang, low-latency routing, distributed systems.
- Experience designing and troubleshooting low-latency applications.
- Experience in enterprise software deploy / developing SaaS application is a plus
- Event drive architecture (EDA) microservices project experience is a plus.
- Additional programming knowledge: Typescript or NodeJS or Python
- Hands on experience using docket containers and Kubernetes.
- Aware about Observability, Asynchronous and Loose Coupling.
- Familiar with deep knowledge on infrastructure and customer application deployment
- Work with message brokers and streaming technologies such as Kafka, or similar event-driven platforms.
A skilled Go/Golang Developer with 3–6 years of experience in building scalable applications using event-driven architecture within distributed systems. The ideal candidate should be comfortable in low level programming, high-performance backend services and have a strong understanding of Observability, asynchronous programming patterns.
Experience or exposure to knowledge embedding and vectorization techniques is a strong plus, especially in the context of modern data-driven or AI-powered systems.
Required Skills
- 4+ years of hands-on experience with Go / Golang
- Strong engineer with security-sensitive, correctness-critical code paths
- Engineer worked on SAAS / On-prem environment
- Experience with containerization tools like Docker and orchestration tools like Kubernetes
Ideal Candidate
We are looking for engineers who:
- Have strong ownership mindset and platform thinking.
- Can balance correctness, performance, and simplicity under pressure.
- Are comfortable making architectural decisions in distributed environments.
- Use AI-assisted development tools effectively while maintaining engineering judgment.
- Can distinguish robust production-grade solutions from generated boilerplate code.
- Have experience supporting SaaS, hybrid-cloud, or on-premise deployments.
Why Join Us:
- Collaborative work environment.
- Exposure to modern tools and scalable application architectures.
- Medical cover for employee and eligible dependents.
- Tax beneficial salary structure.
- Comprehensive leave policy
- Competency development training programs.
The recruiter has not been active on this job recently. You may apply but please expect a delayed response.
Job Description – Embedded Application Engineer (4–6 Years Experience)
Position
Embedded Application Engineer
Experience
4–6 Years
Location
Hyderabad
Job Summary
We are seeking a highly motivated Embedded Application Engineer with 4–6 years of experience in developing, deploying, and maintaining embedded software applications on Linux-based platforms. The ideal candidate should possess strong programming skills in Go, C/C++, Linux, and Python, leverage modern AI-assisted development tools such as Cursor, and have experience working with industrial communication protocols, messaging systems, and DevOps automation pipelines.
The role involves designing edge applications, integrating industrial devices, implementing secure communication frameworks, and enabling scalable deployment and lifecycle management across ARM and AMD-based hardware platforms.
Key Responsibilities
· Design, develop, and maintain embedded applications for Linux-based edge devices.
· Develop high-performance software components using Go, C/C++, Linux, and Python.
· Utilize AI-powered coding assistants (e.g., Cursor) to improve development productivity and code quality.
· Implement and integrate communication protocols such as:
o MQTT
o Sparkplug B
o JSON-based messaging interfaces
o Industrial protocols (Modbus preferred)
· Build edge-to-cloud data communication services and telemetry pipelines.
· Develop software for ARM and AMD processor architectures.
· Create automated CI/CD pipelines using CircleCI and related DevOps tools.
· Implement automated testing, deployment, and release processes.
· Perform debugging, profiling, and performance optimization for embedded systems.
· Collaborate with product, cloud, and platform engineering teams to deliver scalable and secure solutions.
· Support software configuration, packaging, deployment, and version management.
· Contribute to system monitoring, diagnostics, and fleet lifecycle management.
Required Skills & Qualifications
Programming Languages
· Strong proficiency in:
o Go
o C/C++
o Python
o Linux Application development
· Experience using AI-assisted coding tools such as Cursor or similar developer productivity tools.
Embedded & Platform Expertise
· Strong experience with:
o Linux-based embedded development
o Application-level debugging
o ARM and AMD processor architectures
o Multi-threaded and concurrent application design
Communication & Protocols
· Hands-on experience with:
o MQTT
o Sparkplug B
o JSON message structures and APIs
· Familiarity with industrial communication protocols:
o Modbus (preferred)
DevOps & Automation
· Experience with:
o CircleCI
o Continuous Integration (CI)
o Continuous Delivery/Deployment (CD)
o Automated testing frameworks
o Version control systems (Git)
Device & Fleet Management
· Experience with:
o Software packaging and deployment
o Remote device management
o Fleet monitoring and maintenance
o Canonical Snap package management
Preferred Qualifications
· Experience in IoT, Edge Computing, Building Automation, Industrial Automation, or HVAC domains.
· Familiarity with container technologies (Docker/Podman).
· Understanding of cybersecurity practices for embedded devices.
· Experience with cloud integration (AWS, Azure, or GCP).
· Knowledge of telemetry, diagnostics, and remote software update mechanisms.
Key Competencies
· Strong problem-solving and debugging skills.
· Excellent communication and collaboration abilities.
· Ability to work independently in agile development environments.
· Focus on software quality, maintainability, and reliability.
· Passion for automation and modern software engineering practices.
Nice-to-Have Domain Experience
· IoT Edge Platforms
· Industrial Automation Systems
· Building Management Systems (BMS)
· HVAC Controls and Equipment Connectivity
· Smart Building and Energy Management Solutions
Experience Range: 4–6 Years
Education: Bachelor's or Master's degree in Computer Science, Electronics, Electrical Engineering, Embedded Systems, or a related field.
Job Title: AppSec / AI Security Engineer
Employment Type: Full-time/ Permanent
Location: Indore (Work from Office)
About the Role
We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.
If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.
Key Responsibilities
- Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
- Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
- Develop structured code review workflows incorporating specifications, scan results, and code provenance.
- Optimize security scanning tools to reduce false positives and drive developer adoption.
- Investigate and manage security findings using established remediation and documentation processes.
- Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
- Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.
Required Skills & Experience
- Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
- Experience implementing automated security scanning and enforcement — not just operating existing tools.
- Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
- Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
- Ability to design, build, and own security automation and governance solutions from the ground up.
- Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
- Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
- Strong analytical mindset and ability to independently assess security risk across internal and external codebases.
Preferred Qualifications
- ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
- Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
- Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
- AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
- Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
- Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).
About Company:
Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.
For more info, please visit our website: https://5exceptions.com







