Principal Consultant - Cybersecurity & Agentic AI

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & Dev Ops, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our Fin Labs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more.

Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 14500+, and has 55 offices in 20 countries within key global markets.

As “Principal Consultant, Agentic AI Cybersecurity Engineer” Candidate will work hands-on alongside our cybersecurity engineering and application security teams to build, operate, and advance the agentic AI systems that find, exploit, and remediate vulnerabilities end-to-end across our application and infrastructure estate. Operating at a principal engineer level, candidate will personally direct frontier AI models do discover vulnerabilities in production code, develop proof-of-concept exploits, generate and validate fixes, and integrate them into CI/CD pipelines with safe human-in-the-loop controls.

Candidate will also build reusable AI skills, prompts, and tooling that make agentic vulnerability management efficient and scalable across the estate. Candidate will bring deep dual expertise across offensive and defensive security, penetration testing, and software engineering, and apply that fluency to push the boundaries of what is possible with agentic AI in a regulated enterprise environment.

• Architect and operationalize the end-to-end agentic AI patching pipeline spanning detection, fix generation, automated testing, and release across SAST, DAST, SCA, IAST, container, and server vulnerabilities.
• Use frontier AI models to discover novel vulnerabilities in production application and infrastructure code, develop proof-of-concept exploits, and validate that AI-generated fixes close the underlying root cause.
• Build and maintain the library of reusable AI skills, prompts, evaluation harness, and tooling that power agentic vulnerability discovery, triage, remediation, false positive analysis, and exemption workflows at scale.
• Design and operationalize AI-driven false positive analysis and exemption processes to reduce manual triage burden and surface only actionable findings to development teams.
• Conduct hands-on penetration testing and red team exercise against critical applications and infrastructure to validate defensive controls and agent-generated remediations.
• Extend agentic remediation coverage across SAST, SCA, DAST, IAST, container, and server vulnerabilities, including the data and tooling needed to connect findings back to source.
• Design agent prompting, guardrails, evaluation frameworks, and appropriate human-in-the-loop controls to ensure safe autonomous code changes, testing, and deployment.
• Drive integration of agentic remediation into enterprise CI/CD pipelines (Github, Jenkins, etc.) across the deployment landscape.
• Communicate technical design, risk trade-offs, and delivery progress clearly to senior stakeholders including CIO, CISO, 2
  
  LOD, and Audit functions.

• 10+ years hands-on experience across software engineering, offensive security, and defensive security at a principal engineer level, with demonstrated personal contributions to production codebases and published vulnerability research or penetration testing engagements.
• Deep fluency in vulnerability classes including memory safety, injection authentication and authorization flaws, cryptographic misuse, deserialization, race conditions, and supply chain attacks, with hands-on experience finding and exploiting each.
• Extensive hands-on experience with…