Lead Security Eng

About the Role

We are seeking a Lead Security Engineer to define and own Keka's security posture for our next phase of global growth. This high-visibility role operates as both a strategic leader and a hands-on technical individual contributor.

AI-Era Security Leadership

You will build against the fundamental shift in cybersecurity driven by AI:

• Establish governance for LLMs, Copilot tools, and agentic systems within engineering workflows.
• Mitigate AI-specific threats including prompt injection, model inversion, training data poisoning, and adversarial misuse of product features.
• Detect and defend against deepfake social engineering and automated vulnerability exploitation via red-teaming AI/ML integrations to prevent data leakage at inference endpoints.

Cloud & Platform Security

Own end-to-end security across AWS, GCP, and Azure environments:

• Enforce IAM, network segmentation, secrets management, encryption, and zero-trust principles for multi-tenant SaaS architecture.
• Harden Kubernetes clusters with runtime security controls and image scanning.
• Mature Infrastructure-as-Code (IaC) practices using automated policy enforcement like OPA or Sentinel.

DevSecOps & Engineering Partnership

Embed security into CI/CD pipelines as first-class gates. Build developer-facing tooling, secure coding playbooks, and champion software supply chain security (SBOMs, dependency auditing). Treat security as an engineering quality metric that multiplies velocity.

Vulnerability Management & Incident Response

Lead penetration testing coordination and own incident response playbooks. Tune SIEM logging to reduce MTTD/MTTR through regular tabletop exercises and red team scenarios.

Compliance & Governance

Sustain SOC2 Type II, ISO 27001, GDPR readiness, and support enterprise security questionnaires as a credible technical voice for customers worldwide.