Senior Security Engineer - Cloud & AI Platform
Salary not listed • India - Bengaluru • Full-time
Posted 16d ago
Job Location
India - Bengaluru
Tech Stack
Remote Work Policy
On-site
Employment Type
Full-time
Categories
AI Engineer
About the job
Ema builds AI Employees for HR, IT, and Finance, taking on busy work so people can focus on more impactful tasks. Founded by former executives from top tech companies and backed by leading investors, Ema is at the forefront of Agentic AI in production, shipping real systems that run business processes at scale. This role focuses on ensuring the security of AI agents and the platform they operate on, especially as they interact with sensitive enterprise data and systems. You will build security controls for autonomous agents in multi-tenant environments, addressing zero-trust challenges and securing various attack surfaces including LLM orchestration, tool integrations, code execution, and browser automation.
Responsibilities
- Threat model new AI agent features, including prompt injection, data exfiltration, and over-privileged tool use.
- Design guardrails for agentic workflows, such as least-privilege access, human-in-the-loop approvals, and output filtering.
- Enforce tenant and data isolation across retrieval, context stores, and model calls.
- Secure the AI supply chain by vetting models, providers, and third-party components, and managing prompt/config versions.
- Conduct AI red-team exercises and develop automated adversarial tests.
- Establish security baselines for Kubernetes and cloud infrastructure, including RBAC, network policies, and secrets management.
- Implement security measures in CI/CD pipelines, such as IaC scanning, SAST, and policy-as-code.
- Develop AI-aware detection capabilities for logging agent actions and alerting on anomalous behavior.
- Partner with the Security & Compliance Lead on technical controls for SOC 2, ISO 27001, HIPAA, and ISO 42001.
Requirements
- 5+ years of experience in cloud security, application security, or DevSecOps, with a preference for GCP/Azure.
- Deep hands-on experience with Kubernetes and cloud security.
- Proficiency in security automation using IaC (Terraform/Helm) and Python or Bash.
- Working understanding of LLM application risks (OWASP Top 10 for LLM Applications) and agentic system failure modes.
- Ability to influence engineers without formal authority.
Benefits
- Equity
- Variable compensation