About FM:

FM is a 190-year-old, Fortune 500 commercial property insurance company of 6,000+ employees with a unique focus on science and risk engineering. Serving over a quarter of the Fortune 500 and major corporations globally, they deliver data-driven strategies that enhance resilience, ensure business continuity, and empower organizations to thrive.

FM India located in Bengaluru is a strategic location for driving FM's global operational efficiency that allows them to leverage the country's talented workforce and advance their capabilities to serve their clients better.

We are excited to announce an opening for Lead Software Engineer IND at FM India. Please find below the details of the role and its responsibilities.

Skills Required:

C# or Python, Gen AI, Generative AI, Artificial Intelligence, AI, SDLC, Data Security.

Experience Range:

5 - 7 years

Role Title: Lead Software Engineer Position Summary:

Participates as a senior team member in the design, development, and maintenance of multi-tiered business applications. Individuals holding this position are typically expected to be mentors from technical and delivery perspectives as well as work independently as a member of a team. Incumbents have a thorough understanding of available technology landscape, tools, and existing designs. This individual also participates fully in all team practices and standards. This role interfaces with IT colleagues and other stakeholders to evaluate defined complex business requirements and processes, assesses available technologies, determines infrastructure, and recommends solution options. Incumbents play a significant role in building application solutions which may involve diverse development platforms, software, hardware, technologies, and tools. Demonstrates personal accountability and actively engages the team in demonstrating accountability.

Supports quality efforts within the team.

Job Responsibilities:

Analysis & Design:

Consideration the Enterprise Architecture including authoritative sources of data, data & systems integration, and interrelationships across multiple subject areas (including transformation rules). Participates and leads design reviews. Contributes to the product backlogs. Assists in scheduling backlog items in the optimal execution order and ensures that the backlog is comprehensive. Advocates adoption of Enterprise initiatives. Helps develop business relationships and integrate activities with other IT departments as appropriate to ensure successful implementation and support efforts.
Analyses impact of requirements and works with Solution Architects on software solutions. Must consider usability, extensibility, efficiency, and performance during all phases of development. Applies design patterns to build secure, maintainable, testable, and evolvable software to ensure coherence across applications. Participates in designing software solutions and prepares technical documentation taking into.

Development:

Estimation: Develops & facilitates technical estimates and timeframes without having complete information and provides confidence level in estimate. Mentors others in good estimation techniques.
Coding: Mentors developers in the design and construction of complex business applications and prepares technical specifications to develop software solutions. Leads by example adoption of FM Global best practices, architectural principles, and security standards. Leads the evolution and improvement of these standards and practices. Develops software to transform and migrate data across environments. Actively participates in peer code reviews and is responsible for code quality.
Test Automation: Responsible for writing pre-deployment automated tests for any delivered code. Participates in testing and debugging of overall system as required. Reviews automated test code to ensure appropriate test coverage. Demonstrates ability to setup and monitor automated tests in the CICD pipeline. Makes decisions regarding where to focus and improve the efficiency, coverage, and stability of automated tests. Participates in coding and maintenance of post deployment test automation frameworks.
Support: Supports and plans effort to implement application in production and support post-production. Ensures development work includes detailed, high-quality documentation at appropriate level to allow for maintenance and support. Plans and executes reduction of technical debt and mitigates risks associated with upgrades

Research:

Participates in continuous improvement through experimentation to stay abreast of the changing technological landscape and clearly articulates and presents value to the product organization. Engages in delivery of applicable enterprise initiatives. Actively participates within learning forums and contributes to setting forum objectives. Deeply understands the technology/business landscape.

Leadership:

Encourages team member contribution within design and implementation efforts within product teams. Serve as a role model in delivery accountability, process, and mindset. Demonstrates and continuously broadens technical capabilities and domain knowledge where individual could serve effectively on a variety of product teams. Enables successful outcomes on teams by proactively identifying and raising transparency of impediments. Mentors junior team members. Fosters teamwork and excellent communication among team members. Provides meaningful feedback.

Skill and Experience:

5+ years of experience required to perform essential job functions.
Additional Experience Qualifier (optional): 7+ years of application development experience with large scale business applications in a fastpaced iterative development environment.
5+ years designing, developing, and implementing business applications from business concept through production.
Object-oriented design, development, and implementation of business applications in current computing architectures.
Working knowledge of relevant technologies: front end tools, middleware, Databases, ORMs, development frameworks, design patterns, API design, Test Automation, DevOps, Cloud Architecture, and Enterprise Integration Patterns.
Ability to demonstrate skills in solving complex problems within and across teams.
Strong analytical skills required. Ability to develop accurate estimates for complex solutions and brings transparency to the estimation process.
Demonstrates drive to align estimates to meet organizational goals.
Strong interpersonal skills are required. Strong work ethic and ability to demonstrate personal accountability for successful product delivery.
Strong verbal and written communication skills with an ability to translate technical concepts to the appropriate level of the audience.
Ability to work self-directed as part of a cross-functional team and shows commitment to the product and team.
Instils a sense of urgency in the team and focuses the team on efficient delivery.
Ability to present technical concepts is desired.

Must Have Skills:

SDLC AI C# or Python security short-lived tokens), lock down network egress, and prevent credential exposure in logs, prompts, build artifacts, and vector stores.
Secure AI integration in the SDLC - Defining agentic data and communication architecture/policy, owning security posture around agentic communication/data systems, Add AI features into pipelines and developer workflows safely, including secure prompt handling, input validation, safe tool invocation patterns, and guardrails that prevent unsafe actions or data leakage.
Threat modeling for AI enabled systems - Identify and mitigate AI specific threats like prompt injection, data exfiltration through tool use, model supply chain risks, insecure plugin or agent design, and misuse paths, then convert those threats into concrete engineering controls and tests.
Secrets management and least privilege for AI tooling - Implement secure identity and access patterns for AI services and agents (managed identity, workload identity,
Security testing automation with AI aware coverage - Build automated checks that validate both code and AI behavior, including SAST, SCA, secret scanning, and policy checks, plus AI-specific tests like prompt-injection regression tests, toxicity or data leakage checks, and tool permission boundary tests.
Model and dependency supply chain security - Apply software supply chain controls to models and AI packages: SBOMs, provenance attestations, signed artifacts, dependency pinning, container image hardening, and controlled promotion across environments.
Data governance and privacy controls for AI workloads - Implement data classification, PII handling, retention, and audit trails for training, fine-tuning, embeddings, and inference logs, ensuring the AI components follow enterprise security and compliance expectations.
Policy as code and compliance automation - Encode AI and platform controls as enforceable policies (OPA, Gatekeeper, Kyverno, Sentinel) and integrate them into CI/CD as automated gates, with clear developer feedback and documented exceptions.
Secure observability and incident response readiness for AI systems - Build monitoring and alerting for AI services and pipelines, detect anomalous agent behavior, unusual tool calls, and data access patterns, and ensure incident runbooks include AI-specific triage signals.

Education and Certifications:

4 Year / bachelor's degree required

Work location: Bengaluru