AI Platform Customization Engineer - Run in Bombay, भारत

Responsibilities

• Configure Checkmarx, Prisma Cloud, Veracode, and other security scanning integrations within Flowsource pipeline templates.
• Codify client security policies as enforceable gates using severity thresholds, allow/deny lists, and exception workflows.
• Operate vulnerability triage and disclosure workflows, routing findings to the appropriate squad within SLA.
• Build and maintain leadership-facing compliance dashboards covering open critical findings, mean time to remediate, and control coverage.
• Partner with DevOps and the Pipeline Integrator to keep pipeline gates consistent across onboarded applications.
• Support client audit readiness by exporting Flowsource evidence packs, scan histories, gate enforcement records, and remediation timelines.
• Track client compliance frameworks and surface gaps to the FDE Lead.

Requirements

• 6+ years of application security or DevSecOps engineering experience.
• Hands-on experience with at least two of Checkmarx, Prisma Cloud, Veracode, Snyk, or SonarQube security profiles.
• Working knowledge of at least one compliance framework: SOC 2, PCI DSS, HIPAA, or ISO 27001.
• Experience with container image scanning and infrastructure-as-code scanning; Trivy, Checkov, tfsec, or Kube-bench experience is helpful.
• Ability to build executive-facing reporting and discuss policy with security leadership and tooling with developers.