Principal Information Security Engineer (AI Product/Cyber Security + SecOps)

Cognite operates at the forefront of industrial digitalization, building AI, and data solutions that solve the world’s hardest, highest-impact problems. With unmatched industrial heritage and a comprehensive suite of AI capabilities, including low-code AI agents, Cognite accelerates the digital transformation to drive operational improvements.

We thrive in challenges. We challenge assumptions. We execute with speed and ownership. If you view obstacles as signals to step forward - not backwards - you’ll feel right at home here. 

Our Moonshot is bold: Unlock $100B in customer value by 2035, and redefine how global industry works. Join us in this venture where AI and data meet ingenuity, and together, we will forge the path to a smarter, more connected industrial future.

Location: Bengaluru, India

Cognite operates at the forefront of industrial digitalization, building AI and data solutions that solve some of the world's hardest, highest-impact problems. With an unmatched industrial heritage and a comprehensive suite of AI capabilities, including low-code AI agents, Cognite accelerates digital transformation to drive operational improvements globally.

Our moonshot is bold: unlock $100B in customer value by 2035 and redefine how global industry works.

We thrive in challenges. We challenge assumptions. We execute with speed and ownership. If you view obstacles as signals to step forward—not step back—you'll feel at home here. Join us in this venture where AI and data meet ingenuity, and together, we forge the path to a smarter, more connected industrial future.

As our first security hire in Bengaluru, you will be the foundational cornerstone of our security presence in India. This role is a unique hybrid, blending deep technical execution with an explicit, high-growth leadership trajectory. You will start as an elite individual contributor establishing local capabilities across Product Security and Security Operations (SecOps).

You are fully expected to hire, build out, and directly manage a world-class, multi-disciplinary security engineering team at this location. A heavy, non-negotiable emphasis of this role is the aggressive implementation and orchestration of Artificial Intelligence (AI) to automate, optimize, and supercharge both our SecOps detection pipelines and Product Security guardrails globally.

You will bridge the gap between application security and infrastructure defense, driving operational excellence, architectural innovation, and team expansion across several core pillars:

• AI-Driven SecOps: Design, test, and deploy automated detection logic and incident playbooks powered by AI agents to dramatically reduce alert fatigue and speed up response times. Integrate AI into SIEM/SOAR data pipelines to identify anomalous behavior and emerging risks across large multi-cloud datasets.
• AI-Accelerated Product Security: Implement automated code analysis and scanning (SAST/SCA) within CI/CD pipelines, leveraging AI-assisted remediation to give developers "how-to-fix" guidance instantly. Build proprietary security automation ("guardrails") that empower software squads to build secure-by-design software at speed.
• Threat Modeling & Hardening: Lead feature-level threat models for high-stakes software projects and actively harden cloud-native environments (AWS/GCP/Azure) and identity management systems.

• Act as the Directly Responsible Individual (DRI) for regional security initiatives, navigating technical hurdles early and making evidence-based decisions.
• Champion the "Security Champions" program locally, conducting developer security workshops and fostering a high-trust, decentralized execution culture.
• Own the long-term hiring, mentoring, and performance strategy for the Bengaluru security hub, expanding our regional capabilities in lockstep with global organizational goals.
• Transition strategic security initiatives from "build and operate" phases into stabilized, long-term regional ownership structures.

You do not need to tick every single box, but we expect a mature mix of technical execution, visionary engineering, and emerging leadership potential:

• AI Expertise: Demonstrated, hands-on experience leveraging LLMs, AI agents, or machine learning models to automate security tasks, orchestrate response flows, or parse complex threat telemetry.
• Product Security Domain: Solid understanding of secure SDLC practices, vulnerability triage, and application scanners (SAST, DAST, SCA tools like CodeQL, OWASP ZAP).
• SecOps Domain: Proven experience in threat hunting, incident response management under pressure, and writing detection rules-as-code within modern SIEM/SOAR systems.
• Engineering & Code Proficiency: Strong script and tool development capabilities using Python, Go, or PowerShell, coupled with an automated DevOps mindset (CI/CD tools, Terraform, APIs).
• Leadership Vector: Clear capability and ambition to step up, scale, and manage a team—including distinct verbal/written communication, stakeholder management, and a high degree of empathy for code creators.
• Continuous-Improvement Mindset: A continuous desire to learn and treat every single alert, incident, or system hurdle as a metric-driven data point to make global defenses stronger.

• The rare opportunity to be the foundational "First Hire" locally, with an explicit, fast-tracked organizational path to build and scale your own team.
• Dedicated Security Exploration Days every second Friday—a full day completely isolated from normal queues, dedicated entirely to your personal research, AI experimentation, and learning.
• A flat organizational structure giving you direct access to executive decision-makers (VP of Security, global CISO).
• Comprehensive private healthcare offerings and health and wellness benefits.
• Engaging, cross-border collaboration with a deeply passionate community of security experts across 60+ nationalities.

Preferred Experience

• 10+ years of preferred technical skills  or experience