Chief Manager, Security Engineering

Company Overview

Protectt.ai is a mobile threat defence platform built to secure mobile apps, devices, and transactions with advanced protection technologies. Its stack includes runtime application self-protection, code and API safeguards, identity protection, fraud controls, malware defence, device intelligence, and live protection against advanced mobile threats. The company works with major enterprises in banking, insurance, finance, fintech, and government to strengthen mobile security ecosystems.

Based in Mumbai, with an innovation centre in Chennai and offices in the USA and the UAE, Protectt.ai is backed by Bessemer Venture Partners and Bajaj Finance. The company has also expanded into AI security, developing solutions for AI red teaming, model scanning, and runtime protection for agentic AI, with a focus on secure and trustworthy AI adoption.

The organization has received recognition such as Security Product Company of the Year by DSCI, Cybersecurity Company of the Year by BWSecurity, Innovative Security Product of the Year by BWSecurity, DSCI Innovation Box Winner, and Great Place To Work certification.

Role Overview

This position is for an experienced cybersecurity professional who can strengthen the security of platforms, products, and infrastructure through deep expertise in cloud security, application security, vulnerability assessment, penetration testing, and red teaming. The role is based in Mumbai and requires an onsite presence.

Key Responsibilities

The role involves securing cloud environments, reviewing application weaknesses, supporting DevSecOps practices, and carrying out offensive security assessments to improve detection and response maturity. The selected candidate will also document findings clearly and support remediation efforts.

Cloud Security

• Set up, review, and continuously monitor security controls across multi-cloud environments.
• Carry out cloud security evaluations, configuration checks, and risk assessments.
• Align security practices with established frameworks and standards such as CIS, NIST, and ISO 27001.

Application Security

• Review source code to uncover security flaws in web and mobile applications.
• Embed security controls into CI/CD pipelines and DevSecOps processes.
• Partner with engineering teams to promote secure development methods.

Red Teaming

• Run adversary simulations and red team exercises to mirror realistic attack paths.
• Act like a threat actor to test how well defensive controls, detection, and response systems perform.
• Work with blue and purple teams to improve incident response and overall security readiness.
• Prepare detailed findings on attack routes, business impact, and remediation actions.

Vulnerability Assessment & Penetration Testing

• Perform both manual and tool-assisted penetration testing across applications, APIs, and infrastructure.
• Record, explain, and escalate vulnerabilities with practical corrective guidance.
• Confirm remediation and verify that identified risks have been properly closed.

Required Experience and Qualifications

• 7 to 12 years of cybersecurity experience, specifically across cloud security, application security, and VAPT.
• Practical experience with cloud security architecture and tooling in AWS and Azure.
• Strong grasp of OWASP Top 10, SANS 25, network security, and secure coding approaches.
• Advanced ability in web, mobile, and API penetration testing.
• Working knowledge of SIEM, EDR, and threat modeling tools.
• Strong analytical thinking, communication, and documentation capabilities.
• CEH certification is required.
• Any other relevant security certifications are desirable.

Eligibility

Candidates with a B.Tech or B.E. in any specialization may apply.

Additional Information

This role is located in Mumbai and follows an onsite work arrangement. The ideal candidate should bring strong cybersecurity expertise with a focus on cloud security, application security, VAPT, and red teaming. The employer does not mention stipend, salary, number of openings, or joining timeline in the source information.