IT Security

Key Responsibilities

• Perform application risk analysis, risk profiling and tiering based on business, data, exposure and regulatory context.

• Define security baselines, gates, severity criteria, exceptions and risk-acceptance processes for the AI SDLC.

• Design security guardrails and policy-as-code for AI coding agents.

• Orchestrate AI-assisted Web/API security validation and act as the human logic auditor.

• Identify systemic vulnerability patterns in AI-generated code and remediate them at the guardrail level.

• Perform threat modeling, secure architecture review and targeted code review for high-risk applications.

• Assess AI/LLM risks including prompt injection, data leakage, insecure tool usage and excessive agency.

• Manage vulnerability lifecycle, residual risk and the feedback loop into the AI platform.

• Review vendor pentest reports, SBOMs, patches and security assurance evidence.

Qualifications

• At least 5 years in application security, product security, penetration testing, DevSecOps or security engineering.

• Platform-level thinking and experience designing controls, guardrails or security standards.

• Hands-on Web/API security experience and ability to validate findings in source code.

• Experience in application risk assessment, tiering, threat modeling and residual-risk communication.

• Strong knowledge of OWASP, API Security, LLM Security, IAM, cloud/container and secure coding.

• Understanding of AI-generated code failure modes and AI governance.

• Strong developer-coaching, reporting and executive risk-communication skills.

• Relevant security certification is an advantage; practical platform and risk experience is essential.