Senior Security Engineer – AI, Cloud

Location : Remote (India) Type : Full-Time Company : Symosis Security About Symosis Security Symosis is a cybersecurity consulting firm purpose-built for the AI-native, cloud-first era. We help public-sector and enterprise clients mature their security operations through managed services, offensive testing, governance, and automation. We’re expanding our MSSP practice and looking for a hands-on leader to own SOC delivery, client engagement, and operational maturity. The Role We are seeking a deeply technical Security Engineer  with strong experience in application, cloud, and AI/ML security  to perform threat modeling, architecture reviews, and third-party risk assessments for large-scale SaaS and AI platforms. The ideal candidate is hands-on, can interpret complex architectures like AI/ML data flows (e.g., training, inference, telemetry, and de-identification pipelines), and is comfortable coding or automating in Python, Azure, or API security environments . What You’ll Do Develop and maintain detailed threat models  for cloud and AI/ML systems, including data flows, trust boundaries, and STRIDE analysis. Conduct architecture and design reviews  for 3rd-party integrations and SaaS systems. Perform API security reviews , penetration tests, and vulnerability assessments of web and cloud workloads. Review machine learning and AI system architectures  for data leakage, bias, model inversion, and telemetry retention risks. Evaluate cloud security configurations  (Azure, AWS, GCP) and enforce least-privilege, encryption, and compliance standards. Support security automation  and build tools to streamline posture management and integration validation. Collaborate with engineering and product teams to design secure integration patterns and risk mitigation strategies. Author technical threat models and security documentation  similar to structured reviews for AI/ML and SaaS applications. What We’re Looking For 5–8 years of SOC or NOC experience, preferably in an MSSP environment. Hands-on expertise with CrowdStrike Falcon  and Rapid7 InsightIDR/InsightVM  (certifications preferred or willing to complete within 30 days). Proven ability to operate in Tier-2 analyst or shift lead  capacity. Strong understanding of NIST CSF, MITRE ATT&CK, and incident response workflows. Excellent written and spoken English; experience supporting U.S. clients across EST/PST . Ability to work flexible hours, including rotational coverage for 24×7 operations. Based in India, remote, with reliable connectivity. Required Qualification 4–8 years of experience in security engineering, application security, or cloud security. Strong grasp of threat modeling methodologies and building security in products Proven experience with AI/ML system or data security, including model lifecycle risk, data privacy, and inference threats. Proficiency in Python and ability to automate or build scripts for API testing and security validation. Hands-on experience with Azure Security, API authentication (OAuth, JWT), and network isolation patterns. Red Team and penetration test assessments Familiarity with frameworks like OWASP ASVS, NIST 800-53, and ISO 27001/27701/42001. Strong analytical writing skills to create professional security reports and threat models. Preferred Qualification Prior experience performing or leading AI/ML threat models or cloud application security reviews. Certifications such as CISSP, CCSP, OSCP, or Azure Security Engineer Associate. Exposure to Responsible AI, data governance, or ML explainability practices. Experience integrating with SaaS or third-party APIs securely in production. Knowledge of Databricks, Adaptive Shield, or Azure Data Factory is a plus. Why Join Symosis? Help shape the India SOC operations for a growing U.S. MSSP. Work with cutting-edge SIEM, EDR, and automation tools. Collaborate directly with the U.S. SOC Manager and leadership team. Flat, collaborative culture with high visibility and growth opportunities. Be part of a technically deep, AI-driven security team.