Senior Security Engineer (Cloud, AI & Compliance)

About us Skit.ai is the pioneer Conversational AI company transforming collections with omnichannel GenAI-powered assistants. Skit.ai’s Collection Orchestration Platform, the world’s first solution, streamlines collection conversations by syncing channels and accounts. Skit.ai’s Large Collection Model (LCM), a collection LLM, powers the strategy engine to optimize interactions, enhance customer experiences, and boost bottom lines for enterprises. Skit.ai has received several awards and recognitions, including the BIG AI Excellence Award 2024, Stevie Gold Winner 2023 for Most Innovative Company by The International Business Awards, and Disruptive Technology of the Year 2022 by CCW. Skit.ai is headquartered in New York City, NY. Visit https://skit.ai/ Job Title : Senior Security Engineer (Cloud, AI & Compliance) Location : Bangalore (100% WFO) Work Type : Fulltime Why this role exists We operate a voice AI platform handling large-scale automated calls for regulated enterprises in banking and telecom. Our customers’ information-security teams routinely require security evidence and assurance — SAST/DAST reports, AWS GuardDuty and container-security reports, CIS Benchmark posture for AWS and Azure, LLM guardrails documentation, and mappings to standards like the OWASP Top 10 for LLMs and MITRE ATLAS. Today this work is handled reactively across the team. We are hiring a senior, dedicated owner for security posture, AI/LLM security, and customer security assurance — someone who keeps our evidence audit-ready, hardens our cloud and containers continuously, and is the trusted point of contact for client security reviews. What you’ll own Cloud security posture (AWS & Azure) Own threat detection and posture management across AWS and Azure — AWS GuardDuty, Security Hub, Inspector, Config; Microsoft Defender for Cloud and Azure Policy. Establish and maintain CIS Benchmark compliance for AWS and Azure; track drift and remediate. Drive IAM hygiene, network segmentation, encryption, secrets management, and least-privilege access. Container & supply-chain security Own container image and runtime security — scanning with Trivy / Grype, configuration auditing with Dockle and Docker Bench, and Kubernetes hardening. Maintain SBOMs and dependency / vulnerability scanning across services; manage remediation SLAs. Integrate infrastructure-as-code scanning (e.g. Checkov, tfsec) into pipelines. Application security Run and operationalize SAST and DAST (e.g. SonarQube / Semgrep / Snyk; OWASP ZAP / Burp Suite); triage findings and drive fixes. Embed security into the SDLC — secure coding standards, PR / security review gates, secrets detection. Coordinate external penetration tests and own remediation tracking. AI / LLM security Own the platform’s LLM guardrails — content safety (e.g. Azure OpenAI content filtering), prompt-injection defenses, output validation, and grounding controls. Maintain mappings to the OWASP…