Senior Cyber Security Manager

DUTIES AND RESPONSIBILITIES:
AI + AppSec Responsibilities

• Lead AI Application Security, including secure design, model security, prompt
  security, data protection, LLM/ML lifecycle governance.
• Perform AI Red Teaming—testing AI models for jailbreaks, hallucinations,
  prompt injections, data leakage, fraud exploitation and adversarial inputs.
• Conduct Secure AI SDLC reviews across stages — dataset validation, model
  training, testing, deployment & monitoring.
• Evaluate risks across GenAI tools, AI agents, RPA with AI plugins, and internal
  automation workflows.
• Assess AI systems for bias, governance compliance, model drift, and
  regulatory adherence relevant to Indian NBFC sector.
  Application Security (AppSec) Responsibilities
• Perform Ethical Hacking and Red Teaming activities for web, mobile, cloud
  and AI-integrated apps/services.
• Discover, assess and mitigate vulnerabilities in internet-facing NBFC
  applications, APIs, microservices and cloud assets.
• Conduct regular VAPT, including:
  o Web App Penetration Testing
  o Mobile App Security (Android & iOS reversing, static/dynamic analysis)
  o API Security Testing
  o Cloud & edge services security
• Conduct secure code review, SAST, DAST, SCA and architecture review across
  technology stacks.
• Ensure alignment with OWASP Top 10, OWASP ML/LLM Top 10, CVSS, MITRE
  ATT&CK, MITRE ATLAS (AI-specific).
• Identify malicious code patterns, exploit chains and hacker tradecraft relevant
  to NBFC fraud vectors.
• Good understanding of emerging technology stacks — API gateways,
  microservices, serverless, RPA, IoT, and AI-based tools.