Grant Thornton INDUS
AI-Driven DevSecOps Engineer - Assistant Manager
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
View Full Job Details on LinkedInAbout Grant Thornton INDUS
Grant Thornton INDUS is a shared services center located in Bengaluru, India, established in 2012. It supports Grant Thornton LLP, the U.S. member firm of Grant Thornton International, by providing back-office services in accounting, audit and assurance, advisory, and tax. The center employs over 2,300 professionals and focuses on enhancing operational efficiencies for U.S. engagement teams through high-quality service delivery. The company emphasizes a high-performance culture and has been recognized as a Great Place to Work. It is involved in community initiatives and promotes professional growth among its employees. Grant Thornton INDUS has made significant contributions to audit hours and has developed Centers for Excellence in areas like Whole Ledger Analytics and employee benefit plans. Its services are designed to support various sectors, including manufacturing, financial services, and technology, among others.
Security at Grant Thornton INDUS
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- The philosophy centers on risk-based prioritization and the integration of security into the development lifecycle through automation.
- Key tenets include moving beyond standard CVSS scores for vulnerability management and using AI-driven agents to automate security decision-making.
- The team aims to 'embed risk management into day-to-day Operations' by partnering closely with infrastructure and application teams..
Security Team
- The Grant Thornton INDUS AppSec and cyber defense team includes leadership roles such as a Manager of Cyber Defense and a Senior Manager for Data Protection and Privacy.
- The team is currently expanding, with at least three active job postings for specialized roles including 'AI-Driven DevSecOps Engineer' and 'Director - Cyber Risk Operations'.
- The team emphasizes skills in CI/CD security integration, vulnerability management tools like Qualys, and AI frameworks like LangChain.
Key Initiatives
- Current initiatives include the implementation of 'Shift Left' security by integrating SAST/DAST into CI/CD pipelines and the development of AI-driven security agents for automated triage.
- The team is also focused on operationalizing cyber risk at scale through a Global Risk Operations Center (ROC) and conducting regular threat modeling and security reviews to ensure compliance with ISO 27001 and SOC 2.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on LinkedIn