Manager-Security Assurance.Information Security Group-ISG

Mashreq is hiring a Manager-Security Assurance.Information Security Group-ISG for a remote role open to applicants in India. Level rates it ; you can apply on Level.

AI in this role

ragllm-integrationai-agents

Job Purpose :

The Manager-Security Assurance role is integral to Mashreq Global Services' Information Security Group (ISG). This role is responsible for strengthening the security posture of modern applications, APIs, cloud-native platforms, and AI-powered systems. The successful candidate will integrate security throughout the Software Development Lifecycle (SDLC), securing applications and APIs, implementing DevSecOps practices, and governing the secure adoption of Artificial Intelligence technologies.

Key Responsibilities for the Role

Conduct intrusive penetration testing and vulnerability assessments on Applications and APIs.

Assess security risks associated with AI-powered applications, LLM integrations, AI agents, and RAG architectures.

Automate security tasks to ensure continuous integration, continuous delivery (CI/CD) processes are secure and efficient.

Utilize advanced attack techniques and tools to simulate real-world cyberattacks, assess security gaps, and recommend mitigation actions.

Design, implement, and maintain secure APIs and application security practices within the development lifecycle, integrating security testing tools at every stage.

Collaborate with development and operations teams to ensure the incorporation of security controls early in the software development process.

Perform security audits and code reviews to identify security flaws in the development pipeline.

Identify and evaluate security risks related to software deployments and automation processes.

Develop and implement risk management strategies to reduce vulnerabilities in the development and operational environments.

Provide actionable feedback and training to teams to improve secure coding and configuration practices.

Work with cross-functional teams to integrate security throughout the development lifecycle.

Prepare detailed reports, including risk assessments, security vulnerabilities, and actionable remediation strategies for technical and non-technical stakeholders.

Stay updated on emerging security threats and vulnerabilities and implement best practices for secure development.

Qualifications

Bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related discipline.

6 to 10 years of progressive experience in Application Security, Penetration Testing, and API security roles.

Relevant certifications (e.g., OSCP, CEH, API Security certifications) are highly desirable.

Proven experience in API security, Application security, and AI Security practices.

Proficiency with security testing tools like Burp Suite, SAST, SCA, DAST, IAST, and dynamic testing tools.

Familiarity with OpenAPI Specifications, OAuth, SAML and API Gateway, including enforcing AAA.

Strong experience with programming/scripting languages (e.g., Python) for automation and security integration.

Familiarity with security-focused DevOps tools (e.g., Azure DevOps, Docker, Kubernetes).

Conduct Vulnerability Assessments and Penetration Testing
Secure API and Application Security
Perform Threat Modelling and Secure Architecture Reviews
Automate DevSecOps Processes
Assess and Mitigate Risks for Traditional and AI-based Applications
Govern Secure Adoption of AI Technologies
Collaborate with Development Teams to Integrate Security into SDLC
Stay Updated with Emerging AI Use Cases and Security Best Practices
Provide Expertise in API Security, Application Security, and AI Security
Ensure Compliance with Regulatory and Compliance Frameworks

Bachelor's or Master's Degree in Computer Science, Information Security, Cybersecurity, or a Related Discipline
6 to 10 Years of Progressive Experience in Application Security, Penetration Testing, and API Security Roles
Relevant Certifications (e.g., OSCP, CEH, API Security Certifications) Highly Desirable
Proven Experience in API Security, Application Security, and AI Security Practices
Proficiency with Security Testing Tools (e.g., Burp Suite, SAST, SCA, DAST, IAST)
Familiarity with OpenAPI Specifications, OAuth, SAML, and API Gateway
Strong Experience with Programming/Scripting Languages (e.g., Python) for Automation and Security Integration
Familiarity with Security-focused DevOps Tools (e.g., Azure DevOps, Docker, Kubernetes)
Experience in the Banking or Financial Services Industry an Advantage
Strong Analytical and Problem-Solving Skills

How we rate this

Manager-Security Assurance.Information Security Group-ISG at Mashreq rates 51 out of 100 for how much of the daily work is AI. That makes it Uses AI (AI Level 2 of 4). The level is about AI in the job, not seniority.

Classification

Uses AI. An ordinary role that requires AI tools.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Open the description and count.

Key facts

Manager-Security Assurance.Information Security Group-ISG is an open job at Mashreq.
Level rates this role AI Level 2 of 4: Uses AI.
The role is based in Bengaluru, Karnataka, India and is marked remote.
The job was posted on October 14, 2026.
Seniority: senior.
Applications are handled by Mashreq. Apply on Mashreq

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

RAGLLM IntegrationAI agents

Also common in cybersecurity jobs at this level

AWS Google Cloud Java C++Generative AI Machine learning

Pay

Typical cybersecurity job: $159k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

How would you design a retrieval step so the model answers from real data instead of guessing?
How have you integrated a large language model into a production application?
How do you decide when an AI agent can act on its own versus asking for approval first?
This role expects you to use AI tools as part of the job. Which ones have you used, and for what?
Tell me about a time an AI tool got something wrong. How did you catch it?

Adapt your resume

List these exact terms on your resume: RAG, LLM Integration, and AI agents. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Put the AI tool in a bullet point about what you did, not just in a skills list. This role treats it as a required part of the job.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review Check your resume with the ATS resume checker

Get new remote cybersecurity jobs (Uses AI ●●○○ or higher) by email

One email a week with the new remote cybersecurity jobs (Uses AI ●●○○ or higher), each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.

Free. One email a week. Unsubscribe in one click.