Principal Information Security Engineer (AI Product/Cyber Security + SecOps)

About this role

Not quite right? These jobs in Bengaluru match the same skills — apply to a few to improve your chances.

Staff Software Engineer - India

Altimate AI

In OfficeBengaluru

Apply

Forward Deployed Engineer - India

Ciroos

In OfficeBengaluru

Apply

Software Development Engineer

Ciroos

In OfficeBengaluru

Apply

AWS /Azure/ Databricks + AI + Agentic AI+ Python- Senior Associate

PwC

In OfficeBengaluru

Apply

Skills you'll use

What you'll do

• AI-Driven SecOps: Design, test, and deploy automated detection logic and incident playbooks powered by AI agents to dramatically reduce alert fatigue and speed up response times. Integrate AI into SIEM/SOAR data pipelines to identify anomalous behavior and emerging risks across large multi-cloud datasets.
• AI-Accelerated Product Security: Implement automated code analysis and scanning (SAST/SCA) within CI/CD pipelines, leveraging AI-assisted remediation to give developers "how-to-fix" guidance instantly. Build proprietary security automation ("guardrails") that empower software squads to build secure-by-design software at speed.
• Threat Modeling & Hardening: Lead feature-level threat models for high-stakes software projects and actively harden cloud-native environments (AWS/GCP/Azure) and identity management systems.
• Act as the Directly Responsible Individual (DRI) for regional security initiatives, navigating technical hurdles early and making evidence-based decisions.
• Champion the "Security Champions" program locally, conducting developer security workshops and fostering a high-trust, decentralized execution culture.
• Own the long-term hiring, mentoring, and performance strategy for the Bengaluru security hub, expanding our regional capabilities in lockstep with global organizational goals.
• Transition strategic security initiatives from "build and operate" phases into stabilized, long-term regional ownership structures.
• AI Expertise: Demonstrated, hands-on experience leveraging LLMs, AI agents, or machine learning models to automate security tasks, orchestrate response flows, or parse complex threat telemetry.

Who can apply

• Product Security Domain: Solid understanding of secure SDLC practices, vulnerability triage, and application scanners (SAST, DAST, SCA tools like CodeQL, OWASP ZAP).
• SecOps Domain: Proven experience in threat hunting, incident response management under pressure, and writing detection rules-as-code within modern SIEM/SOAR systems.
• Engineering & Code Proficiency: Strong script and tool development capabilities using Python, Go, or PowerShell, coupled with an automated DevOps mindset (CI/CD tools, Terraform, APIs).
• Leadership Vector: Clear capability and ambition to step up, scale, and manage a team—including distinct verbal/written communication, stakeholder management, and a high degree of empathy for code creators.
• Continuous-Improvement Mindset: A continuous desire to learn and treat every single alert, incident, or system hurdle as a metric-driven data point to make global defenses stronger.
• The rare opportunity to be the foundational "First Hire" locally, with an explicit, fast-tracked organizational path to build and scale your own team.
• Dedicated Security Exploration Days every second Friday—a full day completely isolated from normal queues, dedicated entirely to your personal research, AI experimentation, and learning.
• A flat organizational structure giving you direct access to executive decision-makers (VP of Security, global CISO).

About Cognite - AI for Industry

Searching for “Cognite - AI for Industry jobs” or “jobs at Cognite - AI for Industry”? You’re in the right place.