Job
Opportunity HubHands-on experience securing enterprise and BFSI or fintech infrastructure CTF participation across web, crypto, pwn, or mixed categories Bug bounty experience, especially private programmes for fintech, cloud or infrastructure companies Able to lead threat modelling for APIs, data systems and AI products Depth in application and API security — auth, access control, data isolation Cloud infrastructure, IAM and secrets management experience Comfortable integrating security checks into CI/CD pipelines Willing to stay hands-on at a principal level rather than manage from a distance Able to work on-site in Bengaluru Own security strategy end to end for AI infrastructure serving population-scale systems A genuinely rare surface — BFSI-grade security applied to foundational models, an API platform and live AI products High ownership and high impact from day one, on a high talent-density team Work alongside researchers and engineers building the models, not a security function bolted on afterwards An AI-first company in how it builds, ships and thinks Compensation is not published by Sarvam — discussed during the process Read the full role description on Sarvam's careers page. Put your offensive security work at the top of your resume — CTFs, bounties, disclosures. Sarvam names these explicitly, which means they'll be read first. Gather links to public write-ups or reports you're allowed to share. Apply through Sarvam's official application form using the Apply link on this listing. Complete the technical and architecture conversations Sarvam's team schedules with you directly.
About
Sarvam AI is hiring a Principal Security Engineer into its Engineering team in Bengaluru.
They want a hands-on security leader — someone who brings the rigour and threat-modelling discipline of BFSI and fintech security and points it at AI infrastructure, platforms and products. Sarvam is stating plainly that this is not an audit or compliance management job. You design architectures, find vulnerabilities yourself, and ship the fixes.
The scope is unusually wide for one role: security strategy and architecture, product and application security, security research, and cloud and DevSecOps. You own how Sarvam's API platform and products are secured, lead threat modelling across AI products, APIs and data systems, and run targeted adversarial testing and red-teaming against them.
The judgement part matters as much as the technical part. Sarvam is a research-led company shipping fast, so the role involves making pragmatic risk calls that keep velocity intact rather than blocking it — and integrating security into CI/CD without slowing teams down.
Context for why the stakes are real: Sarvam builds India's full-stack sovereign AI platform across research, models, infrastructure and applications, works with large enterprises and public institutions, and partners with brands including Tata Capital, SBI Life, CRED, IDFC and LIC. It's backed by Lightspeed, Peak XV and Khosla Ventures, and holds ISO and SOC 2 Type II certifications.
They want a hands-on security leader — someone who brings the rigour and threat-modelling discipline of BFSI and fintech security and points it at AI infrastructure, platforms and products. Sarvam is stating plainly that this is not an audit or compliance management job. You design architectures, find vulnerabilities yourself, and ship the fixes.
The scope is unusually wide for one role: security strategy and architecture, product and application security, security research, and cloud and DevSecOps. You own how Sarvam's API platform and products are secured, lead threat modelling across AI products, APIs and data systems, and run targeted adversarial testing and red-teaming against them.
The judgement part matters as much as the technical part. Sarvam is a research-led company shipping fast, so the role involves making pragmatic risk calls that keep velocity intact rather than blocking it — and integrating security into CI/CD without slowing teams down.
Context for why the stakes are real: Sarvam builds India's full-stack sovereign AI platform across research, models, infrastructure and applications, works with large enterprises and public institutions, and partners with brands including Tata Capital, SBI Life, CRED, IDFC and LIC. It's backed by Lightspeed, Peak XV and Khosla Ventures, and holds ISO and SOC 2 Type II certifications.
Eligibility & requirements
Benefits
Documents
- Updated resume or CV (PDF)
- CTF profile or write-ups (CTFtime, personal blog, GitHub)
- Bug bounty profile or disclosed reports (HackerOne, Bugcrowd, or private programme references you can share)
- LinkedIn profile
- A short note on one vulnerability you found and fixed end to end — what it was, how you found it, what shipped
How to apply
More from Sarvam AI
Startup Program
Sarvam AI Startup Program
