Principal Security Engineer

About this job

Ethos Life, a leading life insurance technology company transforming how insurance is bought, sold, and underwritten through its robust three-sided platform, is seeking a Principal Security Engineer in Bangalore, India. Reporting directly to the CISO, this role involves joining the growing security team to shape the security posture of modern application stacks and cloud platforms. You will lead the design and implementation of scalable, secure systems while owning the AI security program. A normal day involves designing secure architectures, conducting threat modeling, performing security design reviews, collaborating with engineering and DevOps teams, and embedding AI security reviews and adversarial testing into the feature development lifecycle. You will also provide technical leadership, mentor team members, and guide both strategic security initiatives and day-to-day security engineering operations.

Responsibilities

• Design and implement secure architectures for applications, APIs, microservices, and containerized workloads.
• Develop and enforce application security best practices across the SDLC and CI/CD pipelines.
• Conduct threat modeling, security design reviews, and risk assessments for systems.
• Own the AI security program, governance policies, and risk frameworks for AI/ML systems and LLM integrations.
• Perform pre-deployment red-teaming, adversarial testing, and security reviews of AI-powered features.
• Provide technical leadership, guidance, and mentorship to security engineers, developers, and DevOps personnel.
• Lead responses to complex security incidents and architectural flaws to conduct root cause analysis.

Requirements

• 10+ years of experience in security engineering or architecture roles.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Deep expertise in cloud platforms like AWS and infrastructure-as-code tools such as Terraform or CloudFormation.
• Strong background in secure software development, application security, OWASP Top 10, SAST, DAST, and threat modeling.
• Experience in zero-trust architectures, secure API gateways, and identity/access controls.
• Proficiency in scripting or development languages such as Python, Go, or JavaScript.
• Hands-on experience assessing AI/ML system security risks using frameworks like OWASP LLM Top 10, MITRE ATLAS, or NIST AI RMF.

Good to have

• Certifications such as CISSP, CCSP, AWS Security Specialty, or GIAC.
• Familiarity with Kubernetes security, service mesh, and cloud-native security tooling.
• Experience working in regulated industries like fintech, healthcare, or SaaS at scale.
• Experience with AI red-teaming, adversarial machine learning, or LLM security assessment tools.
• Knowledge of emerging AI regulatory frameworks including the EU AI Act.

Who should apply

This role suits an experienced security professional with over a decade of background in security engineering, cloud platforms, and application security who is eager to take on leadership responsibilities. Candidates who possess a deep interest in AI security, threat modeling, and cross-functional mentorship will find this position a strong fit. Freshers cannot apply.

Frequently asked questions