AI Product Security Engineer

Techolution builds enterprise-grade, AI-powered solutions that automate complex business processes. As our capabilities expand in generative AI, securing applications, APIs, and intelligent agent workflows is critical to our mission.

Role Overview

We are seeking a hands-on AI Product Security Engineer who thinks like an attacker. You will investigate vulnerabilities beyond automated scans, assess real-world attack paths across web apps, cloud environments, and AI systems, and own security findings from discovery through remediation.

Key Responsibilities:

• Application Security: Conduct manual penetration testing of web applications and APIs. Identify and validate issues involving access control, authentication, injection flaws, business logic errors, and OWASP Top 10 risks.
• AI & Agent Security: Assess LLM apps, RAG systems, and agent workflows for prompt injections, data leakage, authorization bypasses, excessive permissions, and unsafe tool execution.
• Exploit Validation: Use Burp Suite or OWASP ZAP to investigate vulnerabilities, demonstrate impact via HTTP traffic analysis, review source code for root causes, and validate fixes.
• Cloud & Infrastructure Security: Identify weaknesses in IAM configurations, cloud settings (GCP/GKE), container security, repository management, and CI/CD pipelines.
• Vulnerability Ownership: Prioritize findings based on exploitability and business impact. Drive remediation with engineering teams and verify closure via retesting.
• Security Engineering: Improve assessment workflows and integrate practical controls into the SDLC.

Qualifications:

• Mandatory: Hands-on experience in AppSec, Ethical Hacking, or Penetration Testing. Strong grasp of OWASP Top 10, Web/App/API security principles. Proficiency with Burp Suite and/or ZAP.
• Analytical Skills: Ability to read application code and investigate root causes deeply (not just scanning).
• Tech Stack: Working knowledge of Kubernetes/GKE, IAM, GitHub Actions, CI/CD security.
• Vulnerability Validation: Proven track record finding real-world bugs via bug bounties, CVEs, labs, or production projects using SAST/DAST/SCA tools effectively.
• Soft Skills: Strong communication to explain technical risk and business impact. High ownership, curiosity, problem-solving abilities.