Senior Cyber Security Manager

DUTIES AND RESPONSIBILITIES:
AI + AppSec Responsibilities
• Lead AI Application Security, including secure design, model security, prompt
security, data protection, LLM/ML lifecycle governance.
• Perform AI Red Teaming—testing AI models for jailbreaks, hallucinations,
prompt injections, data leakage, fraud exploitation and adversarial inputs.
• Conduct Secure AI SDLC reviews across stages — dataset validation, model
training, testing, deployment & monitoring.
• Evaluate risks across GenAI tools, AI agents, RPA with AI plugins, and internal
automation workflows.
• Assess AI systems for bias, governance compliance, model drift, and
regulatory adherence relevant to Indian NBFC sector.
Application Security (AppSec) Responsibilities
• Perform Ethical Hacking and Red Teaming activities for web, mobile, cloud
and AI-integrated apps/services.
• Discover, assess and mitigate vulnerabilities in internet-facing NBFC
applications, APIs, microservices and cloud assets.
• Conduct regular VAPT, including:
o Web App Penetration Testing
o Mobile App Security (Android & iOS reversing, static/dynamic analysis)
o API Security Testing
o Cloud & edge services security
• Conduct secure code review, SAST, DAST, SCA and architecture review across
technology stacks.
• Ensure alignment with OWASP Top 10, OWASP ML/LLM Top 10, CVSS, MITRE
ATT&CK, MITRE ATLAS (AI-specific).
• Identify malicious code patterns, exploit chains and hacker tradecraft relevant
to NBFC fraud vectors.
• Good understanding of emerging technology stacks — API gateways,
microservices, serverless, RPA, IoT, and AI-based tools.