About the role
Kapture CX is an AI-native customer experience platform helping enterprises turn their messiest service operations into seamless, intelligent experiences. We build cutting-edge AI (agentic automation, voice AI, real-time intelligence) for industries where complexity is the default: banking, financial services, retail, ecommerce and beyond.
Headquartered in Bangalore with a growing presence in the US and Dubai, we serve 1,000+ enterprise clients across 18+ countries. We’ve raised $20M to date, we’re profitable, and we’re growing 100% year on year, a combination that’s rare at the intersection of AI and SaaS.Today we’re a 400+ strong team, and we’re looking for people who want to build AI that actually ships, scales and solves real problems.
What You Will Do
- Own and improve security across our GCP cloud infrastructure, applications, APIs, networks and databases.
- Identify security vulnerabilities across cloud, application, infrastructure and third-party dependencies and drive them to resolution.
- Conduct security reviews, threat modeling and architecture reviews for new products and major engineering initiatives.
- Implement and manage SAST, DAST, SCA, container scanning and secret scanning as part of CI/CD.
- Strengthen IAM, least-privilege access, service accounts, secrets and production access controls.
- Review and secure APIs, microservices and web applications against vulnerabilities such as SQL Injection, XSS, SSRF, authentication/authorization issues and data leakage.
- Monitor security events across cloud, network and application logs and participate in incident detection, investigation, containment and RCA.
- Improve network security through VPC, firewall, ingress/egress and network segmentation controls.
- Establish security controls for PII, encryption, data access, retention and secure data handling.
- Build security automation using Python, Java, Go or similar technologies to reduce manual security processes.
- Work closely with Engineering, DevOps/SRE and ML teams to embed DevSecOps practices into the development lifecycle.
- Assess security risks associated with LLMs, AI agents, MCP/tools, prompt injection, data leakage and unauthorized tool access.
- Support enterprise security assessments and compliance requirements such as ISO 27001, SOC 2 and DPDP.
- 3–8 years of hands-on experience in Cybersecurity, Application Security, Cloud Security or DevSecOps.
- Strong understanding of OWASP Top 10 and API Security.
- Hands-on experience with GCP or another major cloud platform.
- Good understanding of IAM, networking, Linux, TLS/HTTPS, APIs and databases.
- Experience with security tools such as Burp Suite, SAST/DAST, dependency scanning, vulnerability scanners and SIEM/logging platforms.
- Experience integrating security controls into CI/CD pipelines.
- Strong scripting/programming skills in Python, Java, Go or Bash.
- Ability to understand application architecture and work directly with developers to fix security issues.
- Strong analytical and problem-solving skills.
- Experience with Kubernetes, Docker and Terraform.
- Experience with penetration testing and vulnerability management.
- Experience with GCP security services and security posture management.
- Knowledge of SOC 2 / ISO 27001 / DPDP.
- Experience securing AI/LLM/Agentic AI applications.
- Security certifications such as OSCP, CISSP, CISM or equivalent.