Senior Security Engineer at Ambient in Bengaluru

Job description

• Application
• Build a safer world with us, one incident at a time.
• Ambient.ai is the category creator and leader in Agentic Physical Security. Powered by Ambient Pulsar, the first reasoning Vision-Language Model purpose-built for physical security, our platform seamlessly integrates with existing security cameras and physical access control systems to unify monitoring, access control, threat assessment, response, and investigations through an always-on reasoning layer that augments security operators with superhuman capabilities. The results: 95% fewer false alarms, investigations 20x faster, and 10x faster response.
• The momentum speaks for itself: we doubled new ARR in FY26, and have delivered results for world-class customers including Cisco, ServiceNow, SentinelOne, TikTok, Bayer, and MoMA. That kind of momentum creates an environment where great people thrive, and it shows: we recently ranked #71 out of 500 on the Forbes best startup employers list.
• Founded in 2017 and backed by Andreessen Horowitz, Y Combinator, and Allegion Ventures, Ambient.ai is on a fast-paced journey to fulfill our mission: prevent every security incident possible.
• Ready to learn more? Connect with us on LinkedIn and YouTube
• We’re looking for a Security Engineer to help strengthen Ambient.ai’s security posture as we grow. As part of our India Technology Engineering team, you’ll work across engineering, IT, and business teams to implement security improvements, support compliance programs, and help customers and partners understand our security practices.
• This is a hands-on role spanning security reviews, cloud and endpoint protection, vulnerability management, and customer security assurance. You’ll combine technical expertise with clear communication and practical judgment to identify risks and drive improvements through completion.

Responsibilities

• Help plan and execute security initiatives across our products, infrastructure, and corporate environment.
• Conduct security reviews of systems, architecture, and proposed changes, providing actionable recommendations to engineering and IT teams.
• Improve security policies, technical standards, and operational processes.
• Support compliance programs and penetration testing
• Contribute to SOC 2 and ISO 27001 programs through control implementation, evidence collection, audit preparation, and remediation tracking.
• Coordinate internal stakeholders, auditors, and external testing partners to support assessments and penetration tests.
• Work with engineering teams to address findings and validate fixes.
• Strengthen cloud and endpoint security
• Implement and maintain security controls across cloud infrastructure and employee endpoints.
• Improve identity and access management, secure configuration, endpoint protection, logging, and monitoring.
• Help strengthen network and application defenses, including DDoS protection and web application firewall controls.
• Investigate security alerts and support incident response and follow-up improvements.
• Drive vulnerability management
• Identify, assess, and prioritize vulnerabilities across applications, infrastructure, endpoints, and third-party dependencies.
• Partner with system owners to establish remediation timelines and track findings through closure.
• Improve scanning coverage, reporting, and automation to reduce recurring risks.
• Support customer and partner security assurance
• Complete information security questionnaires and respond to security due diligence requests from customers and partners.
• Partner with Sales, Legal, and Engineering on security reviews and security-related contract requirements.
• Provide accurate documentation of our controls and practices, flagging gaps or commitments that require further review.
• Maintain reusable responses and supporting evidence to improve consistency and turnaround time.

Requirements

• 5+ years of relevant experience in security engineering, information security, or infrastructure engineering with substantial security responsibilities.
• Hands-on experience securing cloud environments such as AWS, Google Cloud.
• Working knowledge of endpoint security, identity and access management, network security, encryption, and security monitoring.
• Experience with vulnerability assessment, risk prioritization, remediation tracking, and verification.
• Familiarity with SOC 2 and ISO 27001 controls, audit evidence, and compliance workflows.
• Understanding of application security fundamentals, including authentication, authorization, secure coding, and common web application vulnerabilities.
• Ability to write scripts or automation in Python, Go, or a similar language.
• Strong written and verbal communication skills, including the ability to explain security risks to technical and nontechnical audiences.
• A practical, collaborative approach to balancing security requirements with business needs.
• A degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Supporting customer security questionnaires, enterprise security reviews, or security-related contract discussions.
• Coordinating penetration tests and working with engineering teams to remediate findings.
• Implementing DDoS protection, web application firewalls, or endpoint detection and response tools.
• Working in a growing SaaS company.

Skills

Required

• Security engineering
• Information security
• Infrastructure engineering
• Cloud security (AWS, Google Cloud)
• Endpoint security
• Identity and access management
• Network security
• Encryption
• Security monitoring
• Vulnerability assessment
• Risk prioritization
• Remediation tracking

Preferred

• Customer security questionnaires
• Enterprise security reviews
• Security-related contract discussions
• Coordinating penetration tests
• Remediating findings
• DDoS protection
• Web application firewalls
• Endpoint detection and response tools

Benefits

• We are creating an entirely new category within a 120+ billion-dollar physical security industry and looking for team members who are also passionate about our mission to prevent every security incident possible
• We have an impressive customer roster of F500 companies, including Adobe, SentinelOne, and TikTok
• Regular Full-time employees receive stock options for the opportunity to share ownership in the success of our company
• Comprehensive health + welfare package (Medical, Dental, Vision, Life, EAP, Legal Services, 401k plan)
• We offer flexible time off to rest and recharge, including Winter Break (time off between Christmas and New Year’s for most roles, depending on customer demand)
• You’ll receive everything you need to hit the ground running, including cutting-edge equipment and branded gear
• Enjoy a full range of opportunities to connect with your awesome co-workers
• We love to hike, are foodies, and love music! Check out our most recent Ambient Spotify Playlist