Application & AI Security Engineer

Role overview

Application & AI Security Engineer at Impact Analytics

Employment details

• Location: Bangalore [India]

About the employer

• Impact Analytics is an agentic-first AI software company transforming retail merchandising through cutting-edge AI, LLMs, and Generative AI technologies.
• As a fast-growing Series D company with deployments across five continents, it is building both industry-leading merchandising solutions and foundational AI agents that are redefining how retail decisions are made.
• What makes Impact Analytics unique is its combination of deep retail domain expertise, strong innovation culture, and global presence.
• It is one of the few India-born AI companies recognized globally by organizations like Fortune, Gartner, and the Inc. 5000.
• For candidates looking to work on next-generation AI products with global scale and real-world impact, Impact Analytics is an exciting place to build your career.
• Here’s a link to our website: www.impactanalytics.co .
• The impact that you will be making We are looking for a skilled Application Security & AI Security Engineer with 4–6 years of hands-on experience in application penetration testing, AI agent penetration testing, vulnerability management, and security monitoring.
• The ideal candidate will have strong offensive security skills, practical knowledge of AI/LLM vulnerabilities, experience assessing APIs and cloud environments, and working knowledge of SIEM tools for security monitoring and incident investigation.
• What this role entails 1.
• Application & AI Penetration Testing Conduct penetration testing on web applications, APIs, networks, and cloud environments (Google Cloud Platform).
• Perform manual and automated security testing of web applications, APIs, AI agents, LLM applications, chatbots, and RAG systems.
• Identify issues such as broken authentication and authorization, injection, business-logic flaws, prompt injection, jailbreaks, excessive agency, sensitive-data leakage etc. and insecure tool use.
• Identify, exploit, and document security flaws and misconfigurations.
• Prepare detailed technical reports and executive summaries for stakeholders.
• Contribute to improving internal security testing processes and automation. 2.
• Vulnerability Management & Secure Development Assess application, cloud, and infrastructure vulnerabilities; prioritize findings by severity, exploitability, and business impact.
• Support threat modeling, secure design reviews, and integration of security testing into the SDLC/DevOps process.
• Collaborate with development and infrastructure teams to remediate identified vulnerabilities.
• Stay updated on the latest exploits, vulnerabilities (CVEs), and industry trends. 3.
• SIEM & Security Monitoring Use SIEM platforms such as Wazuh or other open-source SIEM solutions to monitor logs, triage alerts, and investigate suspicious security activity.
• Support detection-rule tuning, incident investigations, and mapping relevant techniques to MITRE ATT&CK. 4.
• Cloud & Infrastructure Security GCP configurations, IAM permissions, network exposure, storage access, secrets handling, and container security basics.
• What lands you in this role 4–6 years of hands-on experience in application security, penetration testing, or offensive security.
• Strong understanding of web/API security, OWASP Top 10, authentication, authorization and common application vulnerabilities.
• Practical understanding of AI/LLM security, including prompt injection, data leakage, and AI agent/tool risks.
• Strong understanding of OWASP Top 10, MITRE ATT&CK, and other industry standards.
• Proficiency in tools like Burp Suite, Metasploit, Nmap, Wireshark, Nessus, Nikto, SQLmap.
• Hands-on experience with scripting languages such as Python, Bash.
• Exposure to SIEM operations, log analysis, alert triage Understanding of Secure SDLC and DevOps principles.
• Preferred Certifications (Any of the following): OSCP, PNPT, eCPPT, Burp Suite Certified Practitioner, or relevant AI security training.
• CPT (Certified Penetration Tester) GPEN (GIAC Penetration Tester) CRTP / CRTE / PNPT / eJPT / eCPPT (as relevant) Soft Skills: Strong analytical and problem-solving skills.
• Excellent communication skills—able to explain technical details to non-technical stakeholders.
• Team player with the ability to work independently under minimal supervision.
• Attention to detail and ability to document findings clearly.
• What we offer An opportunity to be part of some of the best enterprise SaaS products to be built out of India.
• Opportunities to quench your thirst for problem-solving, experimenting, learning, and implementing innovative solutions.
• A flat, collegial work environment, with a work hard, play hard attitude.
• A platform for rapid growth if you are willing to try new things without fear of failure.
• Remuneration with best-in-class industry standards with generous health insurance cover Some of our accolades include: Ranked as one of America's Fastest-Growing Companies by Financial Times for five consecutive years: 2020-2024.
• Ranked as one of America's Fastest-Growing Private Companies by Inc. 5000 for seven consecutive years: 2018-2024.
• Voted #1 by more than 300 retailers worldwide in the RIS Software LeaderBoard 2024 report.
• Ranked #72 in America’s Most Innovative Companies list in 2023—by Fortune—alongside companies like Microsoft, Tesla, Apple, IBM, etc.
• Forged a strategic partnership with Google to equip retailers with cutting-edge generative AI tools.
• Recognized in multiple Gartner reports, including Market Guides and Hype Cycle, spanning assortments, merchandising, forecasting, algorithmic retailing, Unified Price, Promotion, and Markdown Optimization Applications.