Job Title: Senior AI & Application Security Architect

Location: India
Reports To: Security & Infra Director

We are seeking a highly experienced Senior AI & Application Security Architect to lead security architecture for AI-driven and business-critical applications across the enterprise. This role is 100% focused on AI and application security, including internally built agentic applications, AI-assisted and vibe-coded applications, integrations with existing business applications and data, on-prem and cloud application environments, and API security. The ideal candidate will bring deep technical security expertise, strong application and AI security knowledge, and a solid understanding of infrastructure, identity, cloud, networking, and enterprise architecture to ensure secure-by-design solutions that are practical, scalable, and aligned with business needs.

Key Responsibilities

·AI & Application Security Architecture

oLead security architecture for AI-enabled applications, internal agentic applications, LLM-based solutions, RAG pipelines, AI integrations, and business-critical applications.

oDefine secure-by-design architecture patterns, guardrails, and technical standards for applications built internally, by vendors, or using AI-assisted and vibe coding approaches.

oReview and approve application designs, AI workflows, data flows, integrations, APIs, identity models, and access patterns before production deployment.

oEnsure applications are secure across on-prem, cloud, SaaS, hybrid, containerized, and API-driven environments.

oTranslate security requirements into practical engineering controls, reference architectures, reusable patterns, and automated guardrails.

·AI, Agentic Apps & Data Security

oLead AI security reviews for internal and third-party AI solutions, including agentic applications, copilots, chatbots, automation agents, AI-assisted workflows, and embedded AI features.

oDesign security controls for prompt injection, data leakage, excessive agency, insecure tool use, model/API abuse, unsafe plugins, malicious content handling, and sensitive data exposure.

oDefine governance, guardrails, approval criteria, and secure implementation patterns for AI adoption across enterprise and R&D environments.

oAssess security risks across AI supply chains, including third-party models, AI APIs, training data, embeddings, vector databases, orchestration layers, and connected tools

oEstablish monitoring, logging, auditability, and incident response requirements for AI and application security events.

oArchitect API security controls, including authentication, authorization, OAuth/OIDC, service-to-service access, rate limiting, API gateway protections, API discovery, inventory, and abuse prevention.

oDefine threat modeling practices for applications, APIs, AI workflows, agentic behavior, data access, and integrations with enterprise systems.

·Application Security, DevSecOps & Secure SDLC

oEmbed security into the full application lifecycle, from ideation and architecture through development, testing, deployment, and operations.

oPartner with R&D, DevOps, IT, cloud, data, and business application teams to identify risks and implement scalable security controls.

oDefine and improve secure SDLC processes, including SAST, DAST, SCA, secrets scanning, IaC scanning, container security, dependency governance, and remediation workflows.

oGuide vulnerability management for applications and APIs, including risk-based prioritization, remediation guidance, exception handling, and recurring risk reduction.

·Technical Leadership & Advisory

oAct as the security authority for AI and application architecture decisions, providing clear guidance to engineering, IT, data, and leadership teams.

oEvaluate emerging AI, agentic, application, API, and cloud technologies and define secure adoption requirements.

oLead architecture reviews, security design discussions, risk acceptance processes, and technical governance for AI and application initiatives.

Qualifications

• Experience:

o10+ years in cybersecurity, with deep experience in application security, AI security, cloud security, secure architecture, and technical security leadership.

oProven experience securing enterprise applications, business systems, APIs, integrations, SaaS platforms, cloud-native applications, and on-prem application environments.

oStrong hands-on understanding of infrastructure security, including identity, networking, endpoint security, cloud platforms, containers, monitoring, SIEM/XDR, and security operations.

oDeep expertise in application security, API security, threat modeling, secure SDLC, DevSecOps, vulnerability management, authentication, authorization, encryption, secrets management, and secure coding practices.

oExtensive experience working with R&D, DevOps, product engineering, IT, cloud, data, and business application teams.

oHands-on experience with AI security, including LLM applications, agentic applications, RAG architectures, AI APIs, prompt injection risks, AI data protection, model/API risk, and AI governance.

oExperience reviewing AI-assisted and vibe-coded applications, including validation of generated code, dependencies, permissions, data handling, and production readiness.

oHands-on experience with Linux and Windows based platforms, cloud services, containers, CI/CD pipelines, and application hosting environments.

oHands-on experience with AppSec and security tools such as SAST, DAST, SCA, secrets scanning, API security testing, WAF/API gateways, SIEM, XDR, CASB, DLP, and patch management tools.

oExperience with monitoring, automation, orchestration, security-as-code, and automated guardrails for development and deployment environments.

oCertifications: CISSP, CSSLP, GWAPT, AWS/Azure Security, cloud architect certifications, or equivalent hands-on experience.

• Skills:

§Strong technical depth, analytical thinking, architecture judgment, and ability to make risk-based decisions in complex application and AI environments.

§Excellent spoken and written English.

§Ability to influence technical teams without direct authority and translate AI and application security requirements into practical engineering controls.