{"id":168981,"url":"https://alion.io/job/skit-ai-senior-security-engineer-cloud-ai-compliance","title":"Senior Security Engineer (Cloud, AI & Compliance)","company":{"id":59516,"name":"Skit.ai","domain":"skit.ai","url":"https://alion.io/company/skit-ai","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":{"grade":"C","score":64,"open_postings":10,"ghost_share":0.6,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":20000,"max_usd":44000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Docker","optional":false},{"name":"Dockle","optional":false},{"name":"Grype","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OpenAI","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"SBOM","optional":false},{"name":"Semgrep","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"SonarQube","optional":false},{"name":"Syft","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false},{"name":"Trivy","optional":false},{"name":"Vault","optional":false},{"name":"LCM","optional":true},{"name":"Stable Diffusion","optional":true}],"status":"live","first_seen_at":"2026-06-16T08:01:57Z","employer_posted_date":"2026-06-16","last_verified_at":"2026-10-26T04:58:52Z","board_verified":true,"closed_at":null,"days_open":132,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":131},"description":"About us\nSkit.ai is the pioneer Conversational AI company transforming collections with omnichannel GenAI-powered assistants. Skit.ai’s Collection Orchestration Platform, the world’s first solution, streamlines collection conversations by syncing channels and accounts. Skit.ai’s Large Collection Model (LCM), a collection LLM, powers the strategy engine to optimize interactions, enhance customer experiences, and boost bottom lines for enterprises. Skit.ai has received several awards and recognitions, including the BIG AI Excellence Award 2024, Stevie Gold Winner 2023 for Most Innovative Company by The International Business Awards, and Disruptive Technology of the Year 2022 by CCW. Skit.ai is headquartered in New York City, NY. Visit https://skit.ai/\nJob Title: Senior Security Engineer (Cloud, AI & Compliance)\nLocation: Bangalore (100% WFO)\nWork Type: Fulltime\nWhy this role exists\nWe operate a voice AI platform handling large-scale automated calls for regulated enterprises in banking and telecom. Our customers’ information-security teams routinely require security evidence and assurance - SAST/DAST reports, AWS GuardDuty and container-security reports, CIS Benchmark posture for AWS and Azure, LLM guardrails documentation, and mappings to standards like the OWASP Top 10 for LLMs and MITRE ATLAS.\nToday this work is handled reactively across the team. We are hiring a senior, dedicated owner for security posture, AI/LLM security, and customer security assurance - someone who keeps our evidence audit-ready, hardens our cloud and containers continuously, and is the trusted point of contact for client security reviews.\nWhat you’ll own\nCloud security posture (AWS & Azure)\nOwn threat detection and posture management across AWS and Azure - AWS GuardDuty, Security Hub, Inspector, Config; Microsoft Defender for Cloud and Azure Policy.\nEstablish and maintain CIS Benchmark compliance for AWS and Azure; track drift and remediate.\nDrive IAM hygiene, network segmentation, encryption, secrets management, and least-privilege access.\nContainer & supply-chain security\nOwn container image and runtime security - scanning with Trivy / Grype, configuration auditing with Dockle and Docker Bench, and Kubernetes hardening.\nMaintain SBOMs and dependency / vulnerability scanning across services; manage remediation SLAs.\nIntegrate infrastructure-as-code scanning (e.g. Checkov, tfsec) into pipelines.\nApplication security\nRun and operationalize SAST and DAST (e.g. SonarQube / Semgrep / Snyk; OWASP ZAP / Burp Suite); triage findings and drive fixes.\nEmbed security into the SDLC - secure coding standards, PR / security review gates, secrets detection.\nCoordinate external penetration tests and own remediation tracking.\nAI / LLM security\nOwn the platform’s LLM guardrails - content safety (e.g. Azure OpenAI content filtering), prompt-injection defenses, output validation, and grounding controls.\nMaintain mappings to the OWASP Top 10 for LLMs and MITRE ATLAS; run AI red-teaming and close gaps.\nDefine guardrail-breach detection and AI-specific monitoring, in partnership with the AI engineering team.\nCompliance & customer security assurance\nBe the primary point of contact for customer (banking / telecom) security questionnaires, due diligence, and audits.\nKeep a living, audit-ready evidence library: SAST/DAST summaries, GuardDuty and container-security reports, CIS posture, guardrails documentation, pen-test summaries, SBOMs.\nSupport and progress formal certifications and frameworks (e.g. ISO/IEC 27001, SOC 2, NIST AI RMF, ISO/IEC 42001) and applicable regulatory expectations (e.g. PCI-DSS where payments are in scope, data-protection requirements).\nDetection, monitoring & incident response\nMature logging, alerting, and threat detection across the stack; integrate with existing observability.\nOwn and rehearse incident-response runbooks; lead investigations and post-incident reviews.\nWhat you bring\nRequired\n5+ years in security engineering, DevSecOps, cloud security, or product security, with senior ownership of security programs.\nHands-on production security across both AWS and Azure, including native security services (GuardDuty / Security Hub / Defender for Cloud).\nStrong container and Kubernetes security - image scanning, runtime, hardening, supply-chain / SBOM.\nApplication security depth - SAST/DAST, secure SDLC, secrets management, vulnerability management.\nDemonstrated experience responding to enterprise customer security reviews and audits (questionnaires, evidence packages, certification programs).\nExcellent written communication - clear security documentation for technical and non-technical audiences, including external client InfoSec teams.\nStrongly preferred\nWorking knowledge of AI/LLM security - OWASP Top 10 for LLMs, MITRE ATLAS, prompt-injection and content-safety controls - or clear aptitude and intent to own this fast-evolving area.\nExperience in a regulated domain (financial services, telecom, healthcare) and with frameworks such as ISO 27001, SOC 2, NIST AI RMF, or ISO 42001.\nFamiliarity with CI/CD security integration and infrastructure-as-code (Terraform).\nRelevant certifications a plus: CISSP, CCSP, AWS/Azure security specialty, CKS, OSCP.\nYou’ll thrive here if you\nOperate independently as the dedicated owner, but partner closely with engineering and AI teams.\nBalance hands-on technical work with customer-facing assurance and documentation.\nAre pragmatic - prioritize the controls and evidence that reduce real risk and unblock customers.\nTools & technologies you’ll work with\n Cloud: AWS (GuardDuty, Security Hub, Inspector, Config, IAM), Azure (Defender for Cloud, Azure Policy, Azure OpenAI content safety). \nContainers: Docker, Kubernetes, Trivy, Grype, Dockle, Docker Bench.\nAppSec: SonarQube / Semgrep / Snyk, OWASP ZAP, Burp Suite. \nPosture & IaC: CIS Benchmarks, Checkov, tfsec. Supply chain: Syft / CycloneDX SBOMs. \n AI security: OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF. Secrets: managed secret store / Vault.","description_format":"text","description_chars":6002,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Speech & Audio AI","AI Agents","Contact Center Software"],"lifecycle":[{"event":"open","at":"2026-08-29T20:54:33Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.232,"p_room":0.28,"age_days":131,"expected_fill_days":36,"reasons":["conf:0","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/skit-ai-senior-security-engineer-cloud-ai-compliance","json_url":"https://alion.io/job/skit-ai-senior-security-engineer-cloud-ai-compliance.json","meta":{"generated_at":"2026-10-26T08:24:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11202,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59516},"rest":"https://alion.io/mcp/rest/get_company?id=59516"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fskit-ai-senior-security-engineer-cloud-ai-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fskit-ai-senior-security-engineer-cloud-ai-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fskit-ai-senior-security-engineer-cloud-ai-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/skit-ai-senior-security-engineer-cloud-ai-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fskit-ai-senior-security-engineer-cloud-ai-compliance"}]}