Cyber Security Engineer

Job Title

Cyber Security Engineer – AI-Native SaaS (10+ Years Experience)

Job Summary

We are seeking an experienced Principal Cyber Security Engineer with 10+ years of experience to lead the security strategy for our AI-native SaaS platform. The role involves securing AI infrastructure, databases, API gateways, cloud environments, servers, and multi-tenant applications, while ensuring compliance with industry security standards.

Key Responsibilities

• Design and implement end-to-end security architecture for AI-native SaaS platforms.
• Secure AI infrastructure, LLMs, AI agents, GPU servers, and model APIs.
• Protect databases (PostgreSQL, Redis, Neo4j, Vector DB) using encryption, RBAC, auditing, and backup security.
• Design secure API Gateway architecture with OAuth 2.0, OIDC, JWT, WAF, mTLS, and rate limiting.
• Secure cloud infrastructure (AWS/Azure/GCP), Kubernetes, Docker, Linux servers, and networking.
• Implement Zero Trust, IAM, PAM, MFA, Secrets Management, and DevSecOps practices.
• Lead vulnerability management, penetration testing, incident response, and SIEM monitoring.
• Ensure compliance with ISO 27001, ISO 42001 (Implementation), SOC 2, GDPR, HIPAA, and OWASP standards.
• Mentor engineering teams and drive security best practices across the organization.
• Implement Data Privacy Engineering: Design and deploy automated PII/PHI discovery, data masking, tokenization, and consent-based access controls critical for a multi-tenant CDP environment to meet GDPR and HIPAA requirements.
• Operationalize ISO 42001 AI Controls: Build technical safeguards for AI data provenance, model transparency, bias monitoring, and adversarial threat protection.
• Automate Compliance & Audit Evidence: Translate ISO 27001, SOC 2, and HIPAA policies into automated technical checks within the CI/CD pipeline and cloud infrastructure, ensuring continuous audit readiness and automated evidence generation

Required Skills

• AI/LLM & Agent Security
• Database Security (PostgreSQL, Redis, Neo4j, Vector DB)
• API Gateway & API Security
• Cloud Security (AWS/Azure/GCP)
• Zero Trust, IAM, RBAC, PAM
• SIEM, WAF, IDS/IPS, Vulnerability Management
• SSPM, CSPM, CASB
• Data Privacy Frameworks: Hands-on implementation of GDPR Article 25 (Privacy by Design) and HIPAA Safe Harbor de-identification.
• Compliance Automation: Experience with continuous compliance and CSPM platforms to automate control monitoring and generate audit evidence.