Application Security & AI Security Engineer - AppSec & AI - India
Level
Middle
Department
Back Office
Type
Full Time
Project
NDA
Locations:
India
Job Details
Posted on:
October 15, 2026
Job ID:
ZgkMSJ
About the Company
Established in 2004, ALLSTARSIT was founded with a clear vision: to enhance the landscape of global IT employment by bridging the gap between companies and skilled professionals. The core belief was that assembling a team shouldn't be hindered by geographical constraints. Fast forward to the present day, ALLSTARSIT stands as an international outstaffing service provider committed to change the way businesses recruit, compensate, and oversee top talent worldwide.
With operational hubs scattered across Europe, Asia, and LATAM, and its headquarters situated in San Francisco, US, the company boasts a workforce of over 1,000 adept professionals. Spanning across more than 20 countries, ALLSTARSIT offers a diverse range of skilled employees across various verticals, including AI, cybersecurity, healthcare, fintech, telecom, media, and so on.
With operational hubs scattered across Europe, Asia, and LATAM, and its headquarters situated in San Francisco, US, the company boasts a workforce of over 1,000 adept professionals. Spanning across more than 20 countries, ALLSTARSIT offers a diverse range of skilled employees across various verticals, including AI, cybersecurity, healthcare, fintech, telecom, media, and so on.
About the Project
Specialization
Headquarters
Years on the market
Team size and structure
Current technology stack
Required skills:
Must Have
- 3+ years of relevant experience, with hands-on expertise in application security, ethical hacking, penetration testing, secure SDLC, threat modeling, SAST, DAST, and API security.
- Deep knowledge of AI technologies, security risks, governance principles, and tools, with practical experience using platforms such as Microsoft Copilot, Copilot Studio, OpenAI, Anthropic, and MCP-based solutions.
- Experience creating and maintaining AI governance policies, technical standards, procedures, risk assessments, and controls for responsible AI adoption.
- Hands-on experience building AI agents, agentic workflows, integrations, and automations using tools such as Power Automate, n8n, or similar platforms.
- Strong analytical, problem-solving, and communication skills, with the ability to translate security findings and AI risks into practical guidance for technical and business stakeholders.
Nice to Have
- AWS or cloud-native application security.
- Coding or scripting experience with Python, PHP, Bash, or similar languages.
- Relevant certifications such as OSCP, GWAPT, CISSP, CSSLP, AWS Certified Security, or AI-related credentials.
Scope of work:
You will strengthen our application security program while enabling the security group and wider organization to adopt AI securely and effectively. In this role, you will combine hands-on application security and ethical hacking with AI governance, automation, and agentic workflow development. You will work closely with application developers, DevOps and platform engineers, enterprise architecture, product managers, and security operations to identify vulnerabilities, improve security throughout the development lifecycle, and support the organization's AI transformation.
- Perform application security testing and ethical hacking activities, including threat modeling, code review, penetration testing, API testing, and validation of vulnerabilities.
- Embed security into the SDLC by defining security requirements, integrating SAST and DAST capabilities, supporting secure design, and advising engineering teams on remediation.
- Manage the end-to-end remediation cycle for application security findings, including risk-based prioritization, technical guidance, validation, and reporting.
- Help govern organizational AI adoption by refining policies, standards, procedures, risk assessments, and security and privacy requirements for AI use cases.
- Design, build, secure, and maintain AI agents, agentic workflows, copilots, and automations that improve security and operational processes.
- Evaluate AI, application security, cloud security, and automation tools through technical assessments and proof-of-concept activities.
- Provide practical training and guidance on secure development, ethical hacking findings, AI risks, and responsible use of AI technologies.
