Role Overview
Kapture is an enterprise Customer Experience platform powering AI, Voicebots, Chatbots, and Agentic AI solutions. We are looking for a hands-on Cybersecurity Engineer to strengthen security across our GCP cloud infrastructure, applications, data platforms, and AI systems.
Responsibilities
- Own and improve security across GCP cloud infrastructure, applications, APIs, networks, and databases.
- Identify security vulnerabilities across cloud, application, infrastructure, and third-party dependencies.
- Conduct security reviews, threat modeling, and architecture reviews.
- Implement and manage SAST, DAST, SCA, container scanning, and secret scanning within CI/CD.
- Strengthen IAM, least-privilege access, and production access controls.
- Review and secure APIs, microservices, and web applications against OWASP vulnerabilities.
- Monitor security events and participate in incident detection, investigation, and RCA.
- Improve network security through VPC, firewall, and network segmentation.
- Establish security controls for PII, encryption, and data handling.
- Build security automation using Python, Java, or Go.
- Assess security risks associated with LLMs and AI agents.
- Support compliance requirements such as ISO 27001, SOC 2, and DPDP.
Requirements
- 3–8 years of hands-on experience in Cybersecurity, Application Security, Cloud Security, or DevSecOps.
- Strong understanding of OWASP Top 10 and API Security.
- Hands-on experience with GCP or another major cloud platform.
- Good understanding of IAM, networking, Linux, TLS/HTTPS, APIs, and databases.
- Experience with security tools such as Burp Suite, SAST/DAST, and SIEM.
- Experience integrating security controls into CI/CD pipelines.
- Strong scripting/programming skills in Python, Java, Go, or Bash.
Nice to Have
- Experience with Kubernetes, Docker, and Terraform.
- Experience with penetration testing and vulnerability management.
- Knowledge of SOC 2, ISO 27001, or DPDP.
- Experience securing AI/LLM/Agentic AI applications.
- Security certifications such as OSCP, CISSP, or CISM.
Skills
- GCP
- Python
- DevSecOps
- SAST/DAST
- IAM