At Navana, we are at the forefront of developing Voice AI solutions tailored for Indic languages, driving growth and innovation for large enterprises.
We build real-time voice AI systems that power critical customer interactions for leading enterprises. Our stack is built for low-latency, high-throughput workloads and is deployed both in our cloud and on customer infrastructure. As we scale, security and compliance are becoming central to how we build and deploy.
You will own security across our multi-cloud and on-prem footprint, embed it into how we ship, and establish the practices the rest of the company will build on.
Core Responsibilities
- Build Navana's security function: establish secure-by-default baselines, threat models, and security standards across both our cloud and customer deployments.
- Own cloud and infrastructure security across hyperscalers (AWS / GCP / Azure) and neo-cloud GPU providers: IAM and least-privilege, network segmentation, secrets management, and continuous posture and threat monitoring using tools such as AWS Security Hub and GuardDuty.
- Harden Kubernetes and container workloads: RBAC, network policies, policy-as-code, image scanning and signing, and runtime threat detection.
- Own endpoint and corporate security: device management (MDM) and disk encryption, endpoint detection and response (EDR), SSO and identity hygiene, periodic access reviews, and clean joiner-mover-leaver workflows.
- Drive compliance and governance: lead readiness and audits across frameworks such as SOC 2, ISO 27001, and ISO 42001, and operationalize controls to meet India's DPDP Act and RBI cybersecurity expectations.
- Embed security into CI/CD and the SDLC: vulnerability management, dependency and supply-chain scanning, and security gates that protect the platform without slowing engineers down.
- Be the company's security point of contact: handle customer security questionnaires and due diligence, build incident-response readiness, and set the security practices the rest of the team will rely on.
Must Have Qualifications
- Demonstrated DevSecOps, DevOps, SRE, or cloud security skills equivalent to 3+ years of experience, with hands-on security work shipped to production.
- Strong Linux fundamentals and solid networking basics (TLS, firewalls, VPNs, segmentation).
- Real depth with at least one hyperscaler (AWS, GCP, or Azure), including its IAM and native security services (AWS Security Hub, GuardDuty, Microsoft Defender for Cloud, GCP Security Command Center).
- Strong in Python and Bash, and comfortable with Docker, Kubernetes, and Git.
- Hands-on experience securing containers and Kubernetes, RBAC, secrets, network policies, and image scanning.