Senior Security Engineer

About this job

Ambient.ai is the category leader in Agentic Physical Security, using advanced Vision-Language Models to unify monitoring, threat assessment, and investigations for major global customers. As a Senior Security Engineer based in Bengaluru, you will play a hands-on role in strengthening the company's security posture as part of the India Technology Engineering team. Your daily routine will involve working closely with engineering, IT, and business units to execute security initiatives, manage cloud and endpoint protection, conduct vulnerability assessments, support compliance programs like SOC 2 and ISO 27001, and assist with customer security assurance and questionnaires. You will combine your technical expertise with practical judgment to identify risks, implement controls, and drive improvements to completion in a fast-paced environment.

Responsibilities

• Plan and execute security initiatives across products, infrastructure, and the corporate environment.
• Conduct security reviews of systems and architecture to provide actionable recommendations.
• Contribute to SOC 2 and ISO 27001 compliance programs through control implementation and audit preparation.
• Implement and maintain security controls across cloud infrastructure and employee endpoints.
• Identify, assess, and prioritize vulnerabilities across applications, infrastructure, and endpoints.
• Complete information security questionnaires and respond to customer due diligence requests.
• Investigate security alerts and support incident response and follow-up improvements.

Requirements

• 5+ years of relevant experience in security engineering, information security, or infrastructure engineering.
• Hands-on experience securing cloud environments such as AWS and Google Cloud.
• Working knowledge of endpoint security, IAM, network security, encryption, and security monitoring.
• Experience with vulnerability assessment, risk prioritization, remediation tracking, and verification.
• Familiarity with SOC 2 and ISO 27001 controls and compliance workflows.
• Understanding of application security fundamentals including secure coding and common vulnerabilities.
• Ability to write scripts or automation in Python, Go, or a similar language.
• Strong written and verbal communication skills for technical and nontechnical audiences.

Good to have

• Experience supporting customer security questionnaires and enterprise security reviews.
• Experience coordinating penetration tests and working with engineering teams to remediate findings.
• Experience implementing DDoS protection, WAF, or EDR tools.
• Prior experience working in a growing SaaS company.

Who should apply

This role suits experienced security professionals with a strong background in cloud, endpoint, and application security who enjoy a hands-on approach. Candidates should have solid experience handling vulnerability management, compliance programs, and customer security reviews while collaborating effectively with cross-functional technical and business teams. Freshers are not eligible for this position as it specifically requires 5+ years of relevant security engineering experience.

Frequently asked questions