Founding Member, Senior AI & Application Security Specialist (Delhi NCR - Hybrid)

Company Description Are you looking to join an organization that is growing and dynamic? What about a high-energy, collaborative environment that rewards hard work?  J.S. Held is a global consulting firm that combines technical, scientific, financial, and strategic expertise to advise clients seeking to realize value and mitigate risk. Our professionals serve as trusted advisors to organizations facing high stakes matters demanding urgent attention, staunch integrity, proven experience, clear-cut analysis, and an understanding of both tangible and intangible assets.  The firm provides a comprehensive suite of services, products, and data that enable clients to navigate complex, contentious, and often catastrophic situations.  Job Description Based in the Delhi NCR region in a hybrid work model, the Sr.

AI & Application Security Specialist will be a founding member of J.S. Held’s AI & Application Security function, helping shape the strategy, standards, and security practices that enable the safe adoption of AI across the organization. This hands-on role focuses on securing AI-enabled applications, agents, RAG architectures, MCP/tool integrations, models, APIs, and cloud services.

Working closely with the Senior Application Security Specialist, the successful candidate will help build and scale a modern AI security program while driving day-to-day AI security initiatives, risk management, and technical guardrails to ensure compliance with legal, regulatory, and organizational requirements. Role Details  Role focus: approximately 70% AI Security and 30% Application Security  Core Responsibilities  Develop and maintain the enterprise AI Security Program.

Establish AI security policies, standards, control frameworks, and security processes.  Lead AI Security execution across standards, architecture principles, risk framework, inventory expectations, and business-aligned security requirements.  Review AI solutions before deployment, including AI-enabled applications, agents, RAG pipelines, APIs, MCP/tool integrations, model workflows, and third-party AI services.  Perform AI threat modeling for prompt injection, model abuse, data leakage, RAG poisoning, agent misuse, unsafe tool calls, model extraction, and AI supply-chain risk.  Define practical controls for AI identity, delegated authorization, agent lifecycle, tool permissions, least privilege, revocation, and auditability.  Secure agentic workflows, including agent-to-agent interactions, MCP servers, autonomous workflows, tool integrations, and SharePoint-grounded AI use cases.  Help define runtime guardrails, including prompt/content controls, tool restrictions, behavioral monitoring, runtime enforcement, and escalation paths.  Lead or coordinate AI security testing and red teaming for priority AI systems, agents, models, workflows, and integrations.  Define AI logging, monitoring, detection use cases, SecOps handoffs, and AI-specific incident response procedures.  Review model provenance, model hosting platforms, open-source models, dependencies, plugins, and third-party AI services for security and governance risk.  Support AI governance, risk, and compliance activities, including AI policies, risk classification, inventory requirements, evidence needs, and alignment with NIST AI RMF.  Help identify shadow AI, unmanaged agents, risky connectors, overshared knowledge sources, and other exposure paths, then drive practical remediation with owners.  Partner with the Senior Application Security Specialist on Application Security reviews, secure SDLC, architecture reviews, code reviews, API reviews, deployment reviews, and design approvals.  Serve as the Senior Application Security Specialist’s backup when they are out of office or when AppSec demand requires additional coverage.  Evaluate SaaS applications for secure configuration, identity access settings, risky integrat