Position: SaaS AI Security Engineer
Location: Offshore, India. 100% Remote work from home in Indian IST Timings.
The SaaS AI Security Engineer is responsible for securing enterprise AI-powered SaaS platforms, embedded AI capabilities, copilots, autonomous agents, and SaaS-to-SaaS AI integrations. This role leverages AI Security Posture Management (AISPM) and SaaS Security Posture Management (SSPM) technologies to discover, inventory, monitor, and secure AI assets across the enterprise.
The engineer provides continuous visibility into AI models, agents, prompts, data flows, permissions, and connected applications while identifying and reducing risks such as prompt injection, sensitive data exposure, over-privileged access, model misuse, unauthorized automation, shadow AI, and agent-to-agent abuse.
Key Responsibilities
AI Security Posture Management (AISPM)
- Discover and inventory AI-enabled SaaS platforms, copilots, embedded AI features, AI agents, and third-party AI services.
- Maintain continuous visibility into AI models, prompts, data pipelines, agent activities, and SaaS AI integrations.
- Establish AI security baselines and continuously assess AI security posture across enterprise SaaS environments.
- Identify and remediate AI misconfigurations, insecure defaults, and excessive permissions.
AI Agent & Copilot Security
- Monitor AI agents and non-human identities (NHIs) for unauthorized actions and excessive access.
- Validate least-privilege access for AI agents, service accounts, plugins, and connected applications.
- Assess agent-to-agent and SaaS-to-SaaS AI interactions for security and governance risks.
- Develop controls to prevent unauthorized automation, privilege escalation, and risky agent behavior.
Prompt & Data Security
- Monitor prompt activity for indicators of prompt injection, jailbreak attempts, data harvesting, and misuse.
- Evaluate AI interactions for sensitive data exposure, including regulated, confidential, proprietary, and business-critical information.
- Implement controls to reduce the risk of data leakage, unintended disclosures, and excessive AI data access.
- Partner with DLP, privacy, and legal teams to ensure appropriate protection of enterprise data used by AI services.
Threat Detection & Incident Response
- Develop detection use cases for AI-specific threats, including prompt injection, model abuse, data exfiltration, agent compromise, and shadow AI.
- Investigate anomalies involving AI applications, autonomous agents, SaaS integrations, and API access patterns.
- Collaborate with SOC, incident response, identity, and cloud security teams to respond to AI-related security events.
- Support threat hunting and forensic investigations involving AI-powered applications.
Governance & Risk Management
- Conduct security reviews of new AI-powered SaaS platforms, plugins, agents, and integrations.
- Evaluate vendor security controls, AI security architecture, and AI-specific risks.
- Develop AI security standards, guardrails, and monitoring requirements.
- Map AI security controls to industry frameworks including NIST AI RMF, ISO 42001, and internal enterprise standards.
Platform Engineering & Automation
- Administer and optimize AISPM and SSPM platforms such as Reco, AppOmni, and similar technologies.
- Build automated remediation workflows for AI security findings.
- Integrate AI security telemetry into SIEM, SOAR, and security operations platforms.
- Develop dashboards, metrics, KPIs, and executive reporting for AI security posture.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field. Or 3 years equivalent work experience.
- 3+ years of experience in cybersecurity, cloud security, SaaS security, or identity security.
- Experience securing SaaS platforms such as Microsoft 365, Salesforce, ServiceNow, Google Workspace, Workday, or similar.
- Understanding of AI and Large Language Model (LLM) concepts, including agents, copilots, RAG, prompt engineering, embeddings, and model integrations.
- Experience with IAM, SSO, OAuth, API security, privileged access management, and cloud security.
- Familiarity with SSPM, DSPM, SIEM, SOAR, CASB, and cloud-native security tooling.
Preferred Qualifications
- Experience with AISPM platforms such as Reco, AppOmni, Zenity, Microsoft Defender AI-SPM, or similar AI security technologies.
- Experience securing Microsoft Copilot, Salesforce Agentforce, ServiceNow AI Agents, ChatGPT Enterprise, Claude Enterprise, Gemini, or equivalent enterprise AI platforms.
- Security certifications such as CCSP, Azure Security Engineer, or AI Security certifications.
- Experience with threat modeling, AI red-team exercises, and AI risk assessments.
Never miss an opportunity! Create an alert based on the job you applied for.
