Senior Security Engineer at Ambient.ai (Bengaluru, India)Senior Security Engineer

Build a safer world with us, one incident at a time. Ambient.ai is the category creator and leader in Agentic Physical Security. Powered by Ambient Pulsar, the first reasoning Vision-Language Model purpose-built for physical security, our platform seamlessly integrates with existing security cameras and physical access control systems to unify monitoring, access control, threat assessment, response, and investigations through an always-on reasoning layer that augments security operators with superhuman capabilities. The results: 95% fewer false alarms, investigations 20x faster, and 10x faster response. The momentum speaks for itself: we doubled new ARR in FY26, and have delivered results for world-class customers including Cisco, ServiceNow, SentinelOne, TikTok, Bayer, and MoMA. That kind of momentum creates an environment where great people thrive, and it shows: we recently ranked #71 out of 500 on the Forbes best startup employers list. Founded in 2017 and backed by Andreessen Horowitz, Y Combinator, and Allegion Ventures, Ambient.ai is on a fast-paced journey to fulfill our mission: prevent every security incident possible. Ready to learn more? Connect with us on LinkedIn and YouTube About the role: We’re looking for a Security Engineer to help strengthen Ambient.ai’s security posture as we grow. As part of our India Technology Engineering team, you’ll work across engineering, IT, and business teams to implement security improvements, support compliance programs, and help customers and partners understand our security practices. This is a hands-on role spanning security reviews, cloud and endpoint protection, vulnerability management, and customer security assurance. You’ll combine technical expertise with clear communication and practical judgment to identify risks and drive improvements through completion.

What you’ll do: Support security initiatives and reviews:

• Help plan and execute security initiatives across our products, infrastructure, and corporate environment.
• Conduct security reviews of systems, architecture, and proposed changes, providing actionable recommendations to engineering and IT teams.
• Improve security policies, technical standards, and operational processes.

Support compliance programs and penetration testing

• Contribute to SOC 2 and ISO 27001 programs through control implementation, evidence collection, audit preparation, and remediation tracking.
• Coordinate internal stakeholders, auditors, and external testing partners to support assessments and penetration tests.
• Work with engineering teams to address findings and validate fixes.

Strengthen cloud and endpoint security

• Implement and maintain security controls across cloud infrastructure and employee endpoints.
• Improve identity and access management, secure configuration, endpoint protection, logging, and monitoring.
• Help strengthen network and application defenses, including DDoS protection and web application firewall controls.
• Investigate security alerts and support incident response and follow-up improvements.

Drive vulnerability management

• Identify, assess, and prioritize vulnerabilities across applications, infrastructure, endpoints, and third-party dependencies.
• Partner with system owners to establish remediation timelines and track findings through closure.
• Improve scanning coverage, reporting, and automation to reduce recurring risks.

Support customer and partner security assurance

• Complete information security questionnaires and respond to security due diligence requests from customers and partners.
• Partner with Sales, Legal, and Engineering on security reviews and security-related contract requirements.
• Provide accurate documentation of our controls and practices, flagging gaps or commitments that require further review.
• Maintain reusable responses and supporting evidence to improve consistency and turnaround time.

What you’ll bring:

• 5+ years of relevant experience in security engineering, information security, or infrastructure engineering with substantial security responsibilities.
• Hands-on experience securing cloud environments such as AWS, Google Cloud.
• Working knowledge of endpoint security, identity and access management, network security, encryption, and security monitoring.
• Experience with vulnerability assessment, risk prioritization, remediation tracking, and verification.
• Familiarity with SOC 2 and ISO 27001 controls, audit evidence, and compliance workflows.
• Understanding of application security fundamentals, including authentication, authorization, secure coding, and common web application vulnerabilities.
• Ability to write scripts or automation in Python, Go, or a similar language.
• Strong written and verbal communication skills, including the ability to explain security risks to technical and nontechnical audiences.
• A practical, collaborative approach to balancing security requirements with business needs.
• A degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Additional experience we value:

• Supporting customer security questionnaires, enterprise security reviews, or security-related contract discussions.
• Coordinating penetration tests and working with engineering teams to remediate findings.
• Implementing DDoS protection, web application firewalls, or endpoint detection and response tools.
• Working in a growing SaaS company.

What success looks like:

• Security initiatives deliver measurable improvements across our cloud, endpoint, and application environments.
• Vulnerabilities and assessment findings are prioritized appropriately and resolved within agreed timelines.
• Compliance evidence is accurate, organized, and available when needed.
• Customers and partners receive timely, consistent, and well-supported security responses.
• Engineering and business teams have a trusted security partner who helps them make informed decisions.

Ambient.ai is proud to be an Equal Opportunity Employer.  Ambient does not unlawfully discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), gender identity, gender expression, national origin, ancestry citizenship, age, physical or mental disability, legally protected medical condition, family care status, military or veteran status, marital status, registered domestic partner status, sexual orientation, genetic information, or any other basis protected by local, state, or federal laws. Ambient is an E-Verify participant.