Sr. Security Researcher

Cybersecurity Engineer – AI Training Project

About the Opportunity

We’re looking for experienced Cybersecurity Engineers to contribute technical expertise to a customer project focused on improving the capabilities of next-generation AI systems.

In this role, you’ll use your real-world experience in cybersecurity, software engineering, vulnerability assessment, and secure development to create high-quality technical inputs that help AI systems better understand, debug, secure, and reason about complex software.

What You’ll Do

• Analyze, debug, and resolve software bugs, vulnerabilities, and security issues across complex codebases.
• Review source code and identify potential security weaknesses, vulnerabilities, and attack vectors.
• Perform security assessments, vulnerability assessments, penetration testing, and codebase audits.
• Develop and modify software using languages such as Python, Java, Rust, Go, C++, or TypeScript.
• Implement new features and fix existing functionality while maintaining strong security and engineering standards.
• Refactor legacy code to improve security, maintainability, reliability, and performance.
• Work on backend systems and help optimize applications for scalability, performance, and security.
• Analyze real-world security scenarios and translate your expertise into high-quality technical examples and problem-solving tasks.
• Document technical findings, vulnerabilities, debugging approaches, and recommended solutions.
• Provide domain expertise that helps improve how AI systems reason about software engineering and cybersecurity problems.

What We’re Looking For

• Strong professional experience in Cybersecurity / Application Security / Product Security / DevSecOps / Penetration Testing / Vulnerability Management.
• Strong programming experience in one or more of:
• Python
• Java
• Rust
• Go
• C++
• TypeScript
• Proven experience with debugging, troubleshooting, and fixing complex software issues.
• Hands-on experience with penetration testing, vulnerability assessment, security auditing, or application security.
• Understanding of secure software development practices and modern security threats.
• Strong knowledge of data structures, algorithms, software architecture, and code quality.
• Ability to review unfamiliar codebases and quickly understand how systems work.
• Strong written communication and the ability to explain complex technical findings clearly.

Nice to Have

• Experience with OWASP, API security, cloud security, DevSecOps, or threat modeling.
• Experience performing security assessments on production applications or enterprise systems.
• Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, SAST/DAST tools, or vulnerability scanners.
• Contributions to open-source security or software projects.
• Experience working with AI/ML systems, LLMs, data annotation, or AI training projects.
• Relevant security certifications such as OSCP, OSWE, CEH, CISSP, Security+, or equivalent practical experience.

Engagement

• Role: Cybersecurity Engineer
• Work: Remote(Contract)
• Experience: Mid-level to Senior
• Programming: Required
• Cybersecurity expertise: Required

Why Join?

This is an opportunity to apply your existing cybersecurity expertise to an emerging area of technology. Your practical experience debugging software, identifying vulnerabilities, securing applications, and solving complex engineering problems will directly contribute to improving the capabilities of next-generation AI systems.

If you enjoy breaking down complex technical problems, finding vulnerabilities, fixing software, and thinking deeply about how systems work, this project could be a strong fit.

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
• Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
• Manage multiple application security initiatives concurrently while meeting strict timelines in a fast‑paced environment.
• Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
• Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
• Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
• Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
• Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
• Participate in high‑severity or zero‑day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
• Provide input into policies and standards related to application and cloud security controls.

Qualifications and Education Requirements

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
• Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
• Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
• Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
• Excellent documentation, communication, and stakeholder engagement skills.

Desired Skills

• Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
• Experience using the ServiceNow platform for vulnerability or incident tracking.
• Proficiency in Azure cloud and Azure DevOps environments.
• Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.

Job Title: AppSec / AI Security Engineer

Employment Type: Full-time/ Permanent

Location: Indore (Work from Office)

About the Role

We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.

If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

Key Responsibilities

• Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
• Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
• Develop structured code review workflows incorporating specifications, scan results, and code provenance.
• Optimize security scanning tools to reduce false positives and drive developer adoption.
• Investigate and manage security findings using established remediation and documentation processes.
• Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
• Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.

Required Skills & Experience

• Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
• Experience implementing automated security scanning and enforcement — not just operating existing tools.
• Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
• Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
• Ability to design, build, and own security automation and governance solutions from the ground up.
• Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
• Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
• Strong analytical mindset and ability to independently assess security risk across internal and external codebases.

Preferred Qualifications

• ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
• Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
• Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
• AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
• Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
• Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).

About Company:

Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.

For more info, please visit our website:  https://5exceptions.com

About StrideOne:

StrideOne is a unified tech-enabled financial platform and NBFC focused on enabling MSMEs and SMEs through structured credit solutions, receivables financing, and receivables management. We are designed to simplify access to capital, improve cash flow visibility, and support risk-aware financial decision-making for growing businesses across industries. With a steadily growing disbursement footprint, an expanding anchor network, and established partnerships with multiple lending institutions, StrideOne is entering its next phase of growth. The organisation is building a financial ecosystem that combines lending, receivables management, and data-driven workflows, positioning itself to scale sustainably while maintaining strong governance, portfolio quality, and operational discipline.

Key Responsibilities:

Architect & Design: Design and implement highly scalable, available, and secure web applications. You’ll be responsible for designing multi-tenant architectures, ensuring data isolation, and leveraging modern cloud infrastructure to ensure the platform scales efficiently.

Security Focused Development: Develop and enforce secure coding standards and best practices for cloud-based applications and APIs. Conduct regular code reviews with a focus on security vulnerabilities.

API & Microservices Design: Design and implement secure, scalable, and maintainable APIs and microservices that integrate seamlessly with the platform. Ensure the use of best practices for service discovery, communication, and fault tolerance.

Performance Optimization: Identify and resolve performance bottlenecks in the application and infrastructure, ensuring scalability and responsiveness under varying load conditions.

Compliance & Regulatory Requirements: Ensure that applications comply with industry standards and regulations (e.g., GDPR, HIPAA, SOC 2, ISO 27001). Assist with audits and security certifications.

Collaboration & Leadership: Work closely with product managers, QA engineers, and other stakeholders to define and implement new features and improvements. Collaborate with the infrastructure team to ensure seamless deployment and scaling of the application. Also mentor and guide junior engineers on secure coding practices and development techniques.

Security Automation & Monitoring: Implement logging, monitoring, and alerting systems to continuously assess the security posture of the application. Stay up to date with the latest security trends, vulnerabilities, and best practices. Promote security awareness and training within the engineering team.

Qualifications:

Experience: 2+ years of experience in software engineering, with a focus on developing secure and scalable multi-tenant web applications with customer data isolation and tenant-specific configurations.

Tech Stack: Proficiency in modern web technologies (Python is a plus), relational databases, and cloud platforms (AWS, Azure, GCP).

Microservices Architecture: Strong experience designing and developing microservices-based architectures. Familiarity with service discovery, API Gateway, inter-service communication, and distributed systems principles.

Scalability & Performance: Experience with designing highly scalable and performant systems. Knowledge of caching, database sharding, partitioning, and high-throughput systems.

Security Expertise: Understanding of cloud security principles, cryptography, identity and access management (IAM), and secure coding practices.

Analytical Skills: Strong problem-solving skills with the ability to analyze complex security issues and provide practical solutions.

Soft Skills: Strong communication skills with the ability to explain complex technical concepts to non-technical stakeholders. Experience working in agile, collaborative environments.

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.

Learn more at www.shipthis.co

Role Overview

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

What You’ll be Doing

Security Operations

• Monitor infrastructure, application, and security alerts and assist with incident investigation.
• Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
• Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
• Track security issues and corrective actions through closure.

Vulnerability Management

• Run and review application and infrastructure vulnerability scans.
• Maintain a vulnerability register and coordinate remediation with engineering teams.
• Support VAPT and penetration-testing exercises and validate closure of findings.
• Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

• Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
• Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
• Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
• Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

• Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
• Maintain device inventory and monitor endpoint compliance.
• Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
• Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
• Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

• Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
• Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
• Automate repetitive deployment, infrastructure, security, and compliance tasks.
• Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
• Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Required Fundamentals

• Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
• Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
• Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Desired Qualifications

• 1–2 years of experience with strong fundamentals are welcome.
• Basic scripting knowledge in Python, Bash, or similar.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
• Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates:

• Who can join immediately
• Female candidates returning to work after a career break are strongly encouraged.

We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.

Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product

• Develop python-based automation for large data sets data analysis for vulnerability management reporting.
• Leverage machine learning in the process as required.
• Develop Prompts to automate test data extraction process from databases.
• Provide technical expertise through a hands-on approach to teams and projects.
• Experience with one or more general purpose programming languages including but not limited to: Java, Python, R or equivalent
• Experience and knowledge in designing, building, and deploying multi layered application Infrastructure involving On-premises & AWS Cloud platform using services BedRock LLM models.
• Handle design, definition, planning and development.
• 100% adherence to architectural and development best practices including the use of standard architectures, proper use of code management, document design and design artifacts and conduct design/code reviews.
• Create optimization plans to innovate, shift-left, and mitigate gaps.
• Apply cloud concepts and capabilities to deliver testing for cloud-hosted apps.
• Report succinct testing goals and results to the leadership.
• Train and educate various teams on SV ideas and expectations.
• Expand responsibilities to drive test data, test environment, and service virtualization strategies.

Cyber Security Expert

We are seeking a highly skilled Cyber Security Expert with strong expertise in AI-driven

security tools and ethical hacking techniques. The ideal candidate will safeguard our digital

infrastructure, proactively identify vulnerabilities, and design intelligent defense mechanisms

against evolving cyber threats.

Key Responsibilities

• Threat Analysis: Identify, assess, and mitigate potential risks across systems and

networks.

• AI Security Tools: Deploy and manage AI-based solutions for intrusion detection,

anomaly monitoring, and predictive threat modelling.

• Ethical Hacking: Conduct penetration testing, simulate cyber-attacks, and recommend

remediation strategies.

• Incident Response: Lead investigations, contain breaches, and implement recovery

measures.

• Compliance & Governance: Ensure adherence to data protection laws, industry

standards, and organizational policies.

• Training & Awareness: Educate employees on best practices and emerging threats.

Required Skills & Qualifications

• Proven hands-on experience with AI-powered security platforms (e.g., SIEM, SOAR,

ML-based anomaly detection).

• Strong knowledge of ethical hacking tools (Metasploit, Burp Suite, Kali Linux, etc.).

• Expertise in network security, firewalls, IDS/IPS, and endpoint protection.

• Familiarity with cloud security (AWS, cloud platform).

• Proficiency in scripting languages (Python, Bash, PowerShell) for automation.

• Solid understanding of cryptography, authentication protocols, and secure coding

practices.

Location: Pune/Bengaluru

As a Senior Software Engineer, you will tackle a highly challenging role within our Cyber Security Engineering integration development team. You will be responsible for the End-to-End (E2E) delivery of projects from gathering customer requirements to deploying high-performance data exchange solutions on-prem or in the cloud. We are looking for a Systems-Level Thinker who can seamlessly transition between building complex integrations and architecting high-throughput, low-latency backends. Because each integration may require a different technical approach, we value engineers who love reskilling, following agile best practices, and maintaining an evolving mindset.

Core Responsibilities

Technical Leadership and Architecture

● Systems Engineering: Design, build, and optimize high-throughput, low-latency backend systems and data-exchange layers.

● Architecture and Integration: Participate in planning, defining, and exploring solution alternatives. Architect and estimate deep technical custom solutions and integrations across diverse enterprise tech stacks. ● Stream Processing: Implement event-driven architectures, manage backpressure, and handle real-time state management across security platforms.

● Delivery Ownership: Own projects end-to-end, defining and implementing enablers to evolve solution intent directly alongside our Agile teams.

Team Leadership and Quality

● Mentorship: Actively lead, coach, and mentor junior developers, providing technical guidance to foster professional development.

● Engineering Excellence: Oversee code reviews, build robust CI/CD pipelines, enforce strict quality checks, and ensure rigorous adherence to coding standards.

● Agile Execution: Actively participate in Agile development, including writing, breaking down, and estimating User Stories.

Customer and Stakeholder Collaboration

● Customer Delight: Maintain a strong customer-first attitude while designing, building, and deploying products.

● Technical Communication: Articulate complex technical trade-offs clearly to both business stakeholders and engineering teams.

● Pipeline Management: Manage customer relationships effectively to ensure a continuous flow of project scope, maintaining clear team backlogs.

Job Requirements

● Experience: 5+ years of proven software engineering experience, with a track record of leading small engineering teams or mentoring junior devs.

● High-Throughput Backend Focus: 5+ years of experience engineering robust, real-time backends specifically using Go (Golang) or Java.

● Polyglot and Integration Capability: Deep expertise in at least one or two additional languages/frameworks from our ecosystem: Python, TypeScript, Node.js, React.js, Angular, C#, or C++.

● Computer Science Fundamentals: Excellent knowledge of complex Data Structures, algorithms, and their correct situational usage.

● Adaptability: A passionate programmer who is genuinely open and excited to learn new software development skills as required by changing project demands.

Bonus / Added Advantages

● AI & Intelligent Automation: Hands-on knowledge of AI concepts, Large Language Models (LLMs), and experience building or integrating AI agents to automate complex workflows or security processes.

● Cybersecurity Domain: Experience in the cybersecurity space (SIEM, SOAR, or platform security).

● Modern Web Tech: Strong experience in developing software using modern web technologies.

● E2E Lifecycle: Proven background handling a project completely from discovery to cloud/on-prem deployment.

● Open Source: Active contributions to the Open Source community. (Please share your GitHub/GitLab links in your application!)

About the team

SecurITe’s mission is to build an Agentic‑AI driven security platform that protects critical infrastructure from modern cyber threats. Our focus is on delivering highly performant, resilient, and intelligent network security systems that help defenders stay ahead of adversaries.

About the Role

We’re looking for a seasoned Senior Quality Engineer to provide technical leadership and architectural oversight for our next‑generation cybersecurity AI platform. In this high-impact role, you will define the technical strategy for quality assurance, ensuring our agentic AI transforms cyber defense with unparalleled reliability.

You will be responsible for the end-to-end quality lifecycle, from architectural reviews to the deployment of scalable automation frameworks. Beyond technical execution, you will serve as a mentor to junior team members, fostering a culture of technical excellence and driving the strategy that ensures our solutions meet the rigorous demands of critical infrastructure protection.

What You’ll Do

●    Defining and driving comprehensive QA strategies and roadmaps for the cybersecurity platform.

●    Designing, developing, and executing test plans, test cases, and automated scripts to ensure software quality.

●    Performing functional, regression, performance, scalability and security testing to identify bugs or defects.

●    Collaborating with developers, product managers, and other stakeholders to understand product requirements and testing needs.

●    Identifying, documenting, and tracking software defects, ensuring clear communication of issues and their resolutions.

●    Leading deep-dive root-cause analysis for critical system defects and security vulnerabilities.

●    Conducting thorough reviews of product specifications and software design to identify potential areas of concern before testing.

●    Architecting and designing complex, scalable test automation frameworks to optimize CI/CD velocity.

●    Ensuring the software meets customer and business requirements by validating the functionality and performance.

●    Assisting in continuously improving QA processes, tools, and best practices to enhance software testing efficiency and effectiveness.

●    Supporting user acceptance testing (UAT) and assisting clients with product validation.

●    Mentoring junior and mid-level engineers, providing technical guidance and conducting architectural reviews.

Required Experience

●    A Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or a related field.

●    8-10 years of proven experience in quality engineering, specifically within network cybersecurity, Identity Providers, or AI-integrated platforms.

●    Expertise in manual and automated testing.

●    Deep domain expertise in complex system validation and advanced automation practices at scale.

●    Proficiency in programming languages like Python to build and run automated test scripts.

●    "Strong knowledge of software testing methodologies, performance testing tools (e.g., JMeter, k6), and security traffic generation/simulation tools (e.g., Ixia BreakingPoint, Scapy, or Snort/Suricata traffic generators)."

●    Understanding of continuous integration/continuous deployment (CI/CD) pipelines and version control systems like Git.

●    Strong communication skills for documenting test results and interacting with cross-functional teams.

●    Excellent analytical skills, attention to detail, and problem-solving ability.

●    Ability to work independently as well as collaboratively in a team environment.

●    A curious mindset with a willingness to quickly learn new technologies and testing tools.

Required Skills & Qualifications

●    Familiarity with cloud-based testing environments (GCP, AWS, Azure).

●    Experience with cybersecurity products or cloud services or IDP or Web UI

The Mindset

●    Problem Solver: You thrive on complex, ambiguous challenges and engineer elegant solutions.

●    Ownership‑Driven: You take initiative, move fast, and deliver outcomes without hand‑holding.

●    Continuous Learner: You stay ahead of the curve in AI, ML, and emerging technologies.

●    Startup DNA: You excel in fast‑moving environments where priorities evolve and impact is immediate.

Role Overview

As a Software Engineer, you will build and maintain features across our SaaS platform. You will work on well-scoped tasks and features, collaborate closely with senior engineers, and grow your skills in software design, cloud-native development, and modern engineering practices. This role is a great fit for engineers who have solid programming fundamentals, are curious and quick to learn, and take pride in writing quality code. You will be supported and mentored while taking on increasing ownership over time.

Required Qualifications

Bachelor’s or Master’s degree in Computer Science or a related discipline.·       

5–8 years of software engineering experience building production-grade applications.

Strong experience building and operating cloud-native SaaS or web applications.

Solid understanding of software design, distributed systems, and modern engineering practices.

Proven ability to own and deliver complex features independently.

Experience debugging and resolving performance, scalability, and reliability issues.

What We Look For

Strong programming fundamentals and a quality mindset.

Curiosity and a strong desire to learn and grow.

Ability to deliver well-scoped tasks reliably.

Good problem-solving and debugging skills.

Collaboration and communication skills.

Ownership and accountability for the work you do.

Passion for building software and continuous learning.