Quantanite

Senior Azure AI Security Engineer
Location
: Thane / Mumbai, India
Start Date
: ASAP
Reporting to
: Technical Project Manager
About Quantanite
Quantanite is a customer experience &amp; digital outsourcing solutions company helping fast-growing businesses &amp; global brands transform operations through intelligent automation, GenAI, &amp; exceptional people.
About the Role
We are seeking a Senior Azure AI Security Engineer to lead hands-on security implementation across Quantanite’s application, cloud, &amp; AI infrastructure estate.
As we build &amp; deploy AI-powered platforms on Azure, this role will ensure security is embedded across the development lifecycle, deployment pipelines, &amp; infrastructure design. You’ll design, implement, &amp; continuously improve controls across software, data, cloud, &amp; AI layers.
This is an engineering-first role for a practitioner who can threat-model AI systems, harden Kubernetes &amp; Azure environments, build secure CI/CD pipelines, &amp; guide engineering teams on secure coding practices.
Key Responsibilities
1. Application &amp; Software Security
<ul>
<li>Embed security controls throughout the software development lifecycle (SDLC) — from design reviews &amp; threat modelling to code scanning, testing, &amp; post-deployment monitoring.</li>
<li>Implement &amp; manage SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), &amp; SCA (Software Composition Analysis) tooling within CI/CD pipelines.</li>
<li>Define &amp; enforce secure coding standards &amp; conduct security-focused code reviews across application teams.</li>
<li>Implement &amp; manage secrets management, certificate lifecycle management, &amp; key rotation practices.</li>
<li>Design &amp; enforce authentication &amp; authorisation frameworks: OAuth 2.0, OIDC, RBAC, &amp; least-privilege access patterns across applications.</li>
<li>Own vulnerability assessment &amp; remediation across application components — identifying, prioritising, &amp; tracking fixes to closure.</li>
<li>Implement &amp; maintain Web Application Firewall (WAF) rules, API security gateways, &amp; input validation controls.</li>
</ul>
2. AI Security Controls
<ul>
<li>Define &amp; implement security controls specific to AI/ML systems: model access controls, prompt injection defences, adversarial input handling, &amp; output validation.</li>
<li>Implement data security for AI pipelines — including per-tenant data isolation, encryption-at-rest &amp; in-transit (AES-256, TLS 1.3/mTLS), &amp; secure data ingestion from external client sources.</li>
<li>Design &amp; enforce data governance controls for AI training &amp; inference environments: data lineage, access logging, &amp; retention policy enforcement.</li>
<li>Assess &amp; mitigate risks specific to LLM &amp; GenAI deployments: model inversion attacks, data leakage through model outputs, jailbreak vectors, &amp; supply chain risks in AI frameworks.</li>
<li>Establish security review processes for AI model deployment, including model signing, registry security, &amp; inference endpoint hardening.</li>
<li>Collaborate with AI/ML engineers to ensure RAG pipelines, vector databases, &amp; agentic workflows are built with security-first design principles.</li>
<li>Stay current with evolving AI security standards &amp; frameworks (e.g. OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF) &amp; translate these into actionable controls.</li>
</ul>
3. Azure Cloud Infrastructure Security
<ul>
<li>Design &amp; implement a secure Azure landing zone: VNet architecture, Network Security Groups (NSGs), Azure Firewall, Private Endpoints, &amp; subnet segmentation.</li>
<li>Implement &amp; manage Azure Security Centre / Microsoft Defender for Cloud — continuously monitoring posture, alerts, &amp; compliance scores.</li>
<li>Harden Azure PaaS services: Azure App Service, Azure Kubernetes Service (AKS), Azure Container Registry, Azure API Management, Azure SQL, &amp; Azure Data Lake Storage.</li>
<li>Manage Azure Active Directory / Entra ID: Conditional Access policies, Privileged Identity Management (PIM), managed identities, &amp; service principal governance.</li>
<li>Implement &amp; maintain Azure Key Vault for secrets, certificates, &amp; encryption key management across all environments.</li>
<li>Design &amp; enforce Infrastructure as Code (IaC) security practices — security policy-as-code, automated scanning of Terraform/Bicep/ARM templates, &amp; drift detection.</li>
<li>Establish cloud security posture management (CSPM) processes &amp; remediation workflows for misconfigurations &amp; policy violations.</li>
<li>Design &amp; implement DDoS protection, rate limiting, &amp; bot mitigation controls at the network &amp; application layers.</li>
</ul>
4. DevSecOps Pipeline &amp; Automation
<ul>
<li>Build &amp; maintain security gates within CI/CD pipelines (Azure DevOps / GitHub Actions) — integrating security scanning, compliance checks, &amp; automated approval workflows.</li>
<li>Implement container security scanning (image vulnerability scanning, runtime security) for Docker &amp; Kubernetes workloads.</li>
<li>Automate security compliance checks &amp; reporting against standards including ISO 27001, SOC 2, &amp; GDPR using Azure Policy &amp; custom automation.</li>
<li>Establish security monitoring, alerting, &amp; incident response pipelines using Azure Monitor, Microsoft Sentinel (SIEM), &amp; Log Analytics.</li>
<li>Define &amp; test incident response runbooks for cloud &amp; application security events, including breach containment &amp; recovery procedures.</li>
</ul>
5. Governance, Compliance &amp; Collaboration
<ul>
<li>Conduct regular vulnerability assessments &amp; penetration testing — managing external testing engagements &amp; remediating findings.</li>
<li>Provide technical security inputs for client due diligence, RFP responses, &amp; compliance audit evidence (ISO 27001, SOC 2, GDPR, client-specific requirements).</li>
<li>Work closely with the InfoSec Leader on aligning technical controls with the organisation's information security policy framework.</li>
<li>Act as a security advisor &amp; enabler to engineering teams — running secure design workshops, threat modelling sessions, &amp; developer security awareness training.</li>
<li>Maintain security documentation: architecture decision records, control evidence, risk registers, &amp; remediation tracking.</li>
</ul>
Required Skills &amp; Qualifications
Education &amp; Experience
<ul>
<li>Bachelor's degree in Computer Science, Information Security, or a related field.</li>
<li>5–8 years of experience in a DevSecOps, Cloud Security, or Application Security engineering role.</li>
<li>Demonstrable hands-on experience across
both
application security &amp; cloud infrastructure security.</li>
<li>Prior experience in a security role supporting AI/ML or data-intensive platforms is a strong advantage.</li>
</ul>
Application &amp; AI Security
<ul>
<li>Proficiency with SAST/DAST/SCA tools: Snyk, Checkmarx, OWASP ZAP, or equivalent.</li>
<li>Strong understanding of OWASP Top 10 (web), OWASP API Security Top 10, &amp; OWASP LLM Top 10.</li>
<li>Hands-on experience with secrets management tools: Azure Key Vault, or equivalent.</li>
<li>Experience securing APIs: authentication (OAuth 2.0, API keys, mTLS), rate limiting, input validation, &amp; API gateway configuration.</li>
<li>Understanding of AI/ML security risks — prompt injection, data poisoning, model exfiltration, &amp; adversarial attacks &amp; practical mitigation approaches.</li>
<li>Familiarity with data encryption standards: AES-256 encryption at rest, TLS 1.3 &amp; mTLS in transit, envelope encryption, &amp; key management.</li>
</ul>
Azure Cloud Security
<ul>
<li>Hands-on expertise with Azure security services: Microsoft Defender for Cloud, Microsoft Sentinel, Azure Firewall, Azure DDoS Protection, Azure Policy, Azure Key Vault.</li>
<li>Strong working knowledge of Azure networking security: VNets, NSGs, UDRs, Private Endpoints, Application Gateway with WAF, Azure Front Door.</li>
<li>Experience hardening Azure PaaS services &amp; AKS (Kubernetes) workloads, including pod security, network policies, &amp; image scanning.</li>
<li>Proficiency with Azure Active Directory / Entra ID: Conditional Access, PIM, managed identities, &amp; RBAC.</li>
<li>Cloud security benchmarks: CIS Azure Foundations, Microsoft Cloud Security Benchmark (MCSB).</li>
</ul>
DevSecOps &amp; Infrastructure as Code
<ul>
<li>Experience building security into CI/CD pipelines using Azure DevOps or GitHub Actions.</li>
<li>Proficiency with Infrastructure as Code tools: Terraform, Bicep, or ARM — including IaC security scanning.</li>
<li>Scripting skills in Python, PowerShell, or Bash for automation of security tasks &amp; compliance checks.</li>
<li>Experience with container security: Docker image hardening, Kubernetes security policies, container runtime protection.</li>
<li>Familiarity with Git-based workflows, branch protection, signed commits, &amp; dependency security management</li>
</ul>
Preferred Experience
<ul>
<li>Relevant security certifications: AZ-500 (Azure Security Engineer), SC-200 (Security Operations Analyst), CISSP, CEH, OSCP, or equivalent.</li>
<li>Experience working in a BPO, contact centre, or digital services environment handling client data under strict confidentiality requirements.</li>
<li>Familiarity with multi-tenant SaaS security architecture — per-tenant data isolation, encryption key segregation, &amp; audit logging.</li>
<li>Experience preparing for &amp; supporting external security audits &amp; penetration testing engagements.</li>
<li>Familiarity with regulatory frameworks relevant to BPO &amp; data processing: GDPR, CCPA, ISO 27001, SOC 2 Type II.</li>
<li>Exposure to AI governance frameworks such as NIST AI RMF or MITRE ATLAS.</li>
<li>Experience with SIEM platforms: Microsoft Sentinel, Splunk, or equivalent — including custom detection rule authoring.</li>
</ul>
Soft Skills
<ul>
<li>Strong analytical &amp; problem-solving skills — comfortable owning security issues from discovery through to remediation.</li>
<li>Excellent communication skills: able to articulate security risks &amp; controls clearly to both technical &amp; non-technical stakeholders.</li>
<li>Collaborative &amp; advisory mindset</li>
<li>High ownership, proactive, &amp; delivery-focused</li>
<li>Ability to work effectively in a fast-paced environment where technology stacks &amp; threats evolve rapidly.</li>
<li>High personal resilience &amp; achievement orientation.</li>
</ul>
Benefits &amp; Development
At Quantanite, we offer a flexible &amp; engaging work environment, development opportunities, regular team events, &amp; a culture shaped by our Purpose &amp; Values. You’ll have a personal development plan &amp; manager support to help you grow in the areas that matter to you, &amp; . As our organisation continues to expand, you’ll also have opportunities to progress internally.
If you’re looking for a career full of purpose &amp; potential, we’d love to hear from you.

DevSecOps Engineer – Cloud & AI Security

DevSecOps Engineer – Cloud & AI Security

This job is no longer available

Talents

Recruiters

About