INFOPARK

AI Engineering Lead

Postion: AI Engineering Lead

Company: ART Technology & Software India Pvt Ltd
Location: Kochi / Bangalore (Remote)
Experience: 8+ Years
Employment Type: Full-Time
Reporting To: CEO

Role Overview

ART Technology & Software India Pvt Ltd is seeking a dynamic and hands-on AI Engineering Lead to drive our AI-first transformation. This leadership role involves defining AI strategy, building scalable AI solutions, and leading a high-performing engineering team to deliver business impact.

Key Responsibilities AI Strategy & Execution

Define and execute the organization’s AI roadmap and vision
Evaluate and implement emerging AI technologies (LLMs, RAG, Agentic AI, Multimodal AI)
Integrate AI across business functions including delivery, sales, and operations
Establish best practices for AI governance, cost optimization, and responsible AI

Team Leadership

Lead, mentor, and scale the AI engineering team
Foster a culture of innovation, ownership, and rapid experimentation
Drive internal AI capability building and upskilling initiatives
Define performance standards and career growth paths

Product & Platform Development

Lead end-to-end delivery of AI-driven solutions (KYC/KYB, agent platforms, automation tools)
Evaluate build vs. buy decisions for AI platforms (AWS Bedrock, Claude, etc.)
Ensure solutions are scalable, secure, and production-ready
Provide technical leadership and architectural direction

Client & Business Engagement

Act as a strategic AI advisor to clients
Support pre-sales, solution design, and proposal development
Conduct workshops and present AI strategies to stakeholders
Represent the organization in external forums and client engagements

Required Skills & Qualifications Must Have

8+ years of experience with 3+ years in AI/ML or AI leadership roles
Hands-on experience with LLM frameworks (LangChain, CrewAI, AutoGen, etc.)
Strong understanding of RAG, prompt engineering, and vector databases
Proven experience delivering AI solutions in production environments
Strong communication and stakeholder management skills
Experience managing high-performing technical teams

Good to Have

Experience in fintech or regulated domains
Knowledge of AI governance and compliance frameworks
Exposure to GCC/global client environments
Experience with AWS (Bedrock, SageMaker) or Azure OpenAI
Contributions to AI research or open-source projects

Why Join Us

Be part of a high-growth AI-first organization
Work closely with leadership and global clients
Lead cutting-edge AI innovation and product development
Opportunity to build and scale impactful AI solutions

Senior IT Support & Infrastructure Engineer

Senior IT Support & Infrastructure Engineer

Location: Remote

Shift Pattern: Operational hours to be aligned with UK business requirements (with flexibility for rotational or out-of-hours deployment as required). The role would be 5 days over 7 with some weekend work. Working hours would be 7am GMT – 4pm GMT.

Role Overview
Operating as the primary offshore deputy to the UK-based IT Manager, this is a high-impact, autonomous role within a fast-paced Fintech BPO environment. The successful candidate will take end-to-end technical ownership of day-to-day service desk operations, act as the escalation point for operational issues and directly assist with infrastructure, security compliance, and client implementation pipelines.
This role requires a blend of strong technical ability, adherence to security frameworks, and hands-on cloud infrastructure experience.

Key Responsibilities
1. Operations & Service Management
Support Ownership: Act as the lead for IT Support tickets, managing the lifecycle of tickets across hardware, software, and access management. Providing and maintaining solutions and system level changes to support proactive support.
Process Automation: Proactively identify operational bottlenecks and develop automation workflows (e.g., scripting repetitive tasks) to minimize ticket volume and improve efficiency. This will involve taking ownership of a chosen RMM product, experience of RMM solutions would be beneficial.
2. Cloud & Contact-Centre Infrastructure
AWS Environment Management: Serve as a secondary administrator for multiple AWS profiles, assisting with infrastructure optimisation, cost auditing, IAM policies, and environment monitoring.
CCaaS Administration: Assist in managing, configuring, and troubleshooting cloud contact-centre environments. It would be desirable to have experience with Amazon Connect including routing profiles, call flows, and releases / amendments.
Modern Networking: Support and maintain next-generation network access layers. Experience with Cloudflare Zero Trust and similar solutions would be beneficial.
3. Identity, Assets & Compliance
Lifecycle Management: Securely orchestrate the full joiner, mover, and leaver (JML) lifecycle, managing identities across Microsoft 365, AWS and password management tools (Bitwarden). Enforcing secure endpoint provisioning via MDM (Intune) including reviewing existing and proactively contributing to policy level changes.
Security Adherence: Ensure all technical operations are aligned or compliance with various standards, including PCI DSS, Cyber Essentials and other relevant standards.
Self-help Knowledge & Documentation: Architect, write, and maintain highly clear technical documentation, standard operating procedures (SOPs), and end-user self-help repositories.

Candidate Profile & Requirements
Essential Technical Experience:
Experience Level: Minimum of 5+ years of progressive experience in IT infrastructure, system administration, or high-tier service desk operations.
Cloud Architecture: Proven, hands-on experience navigating and supporting cloud infrastructure.
Enterprise Ecosystems: Deep administrative knowledge of Microsoft 365 (Exchange, Teams admin, SharePoint, Azure AD/Entra ID).
Next-Gen Networking: Practical understanding of securing distributed/remote workforces via Zero Trust Network Access (ZTNA) frameworks and modern firewalls.
Industry Context: Previous experience working within a regulated sector (Fintech, Banking, or BPO sectors) is advantageous.

Desirable Attributes & Certifications:
Certifications: CompTIA A+, ITIL, AWS Certified Cloud Practitioner / Solutions Architect, equivalent Microsoft Associate certifications.
Programmability: Exposure to scripting, data environments, and an understanding of development environments.

Core Competencies:
Autonomy: An established track record of working productively in a fully remote setup, demonstrating strong self-motivation and ownership.
Communication: Written and verbal English communication skills, with the ability to interface smoothly with stakeholders, internal teams, and third-party vendors.
Analytical Mindset: Exceptional, structured troubleshooting capabilities that look past the immediate symptom to solve root-cause infrastructure issues.

Growth Marketing Manager

The Growth Marketing Manager will be responsible for building a scalable growth engine across multiple group companies from the ground up.
The role will focus on driving qualified pipeline through viral loops, referral systems, and content-led demand generation aligned with defined ICPs.


Key Responsibilities

Design and launch viral loops and referral programmes using free tools, shareable content, and client incentives to generate self-reinforcing lead
Own full-funnel demand generation across paid channels such as LinkedIn Ads and Google Ads, as well as organic channels including SEO and LinkedIn content.
Manage account-based marketing initiatives, email nurture campaigns, and event-to-pipeline conversion strategies.
Build and run structured growth experiments on a quarterly basis, focusing on rapid testing, eliminating low-performing initiatives, and scaling successful strategies.
Manage Zoho CRM and Zoho Marketing Automation workflows, including lead scoring, drip campaigns, SDR handoff, and attribution tracking.
Drive LinkedIn thought leadership programmes across leadership profiles, maintaining a consistent posting cadence.
Build and monitor growth dashboards tracking metrics such as customer acquisition cost, MQL to SQL conversion, pipeline velocity, channel ROI, and viral coefficient.
Create high-quality fintech content, including payment flow explainers, operational playbooks, and compliance guides targeted at technical decision-makers.


Must-Have Skills & Experience

5–10 years of experience in growth marketing, demand generation, or performance marketing.
At least 3 years of experience in B2B tech services, SaaS, or fintech.
Proven experience in building growth systems within IT services companies.
Demonstrated track record of developing viral loops, referral engines, or product-led growth mechanisms with measurable pipeline impact.
Strong analytical capabilities, including experience in dashboards, lead scoring, multi-touch attribution, and A/B testing.
Proficiency in data handling using SQL or advanced spreadsheets.
Excellent written and verbal English communication skills, targeting UK and EU financial services audiences.
Hands-on experience with LinkedIn Campaign Manager, Google Ads, SEO tools such as Ahrefs or SEMrush, and AI tools including ChatGPT, Claude, Codex, and Gemini.

Good to Have

Domain knowledge in payments, card issuance, or open banking.
Experience marketing to UK and EU fintech buyers such as CTOs, VP Engineering, COOs, and CEOs.
Experience in community building through Slack groups, LinkedIn communities, or practitioner networks.


Tech Stack

Zoho CRM and Zoho Marketing Automation.
Google Analytics 4.
LinkedIn Campaign Manager and Google Ads.
Apollo.io.
Ahrefs or SEMrush.
Canva.
AI tools such as Claude, Codex, and Gemini.
Automation tools including Zapier or Make.
Experience in building landing pages and conducting A/B testing.

Senior VAPT Engineer – Cybersecurity & Payment Security

Job Title
Senior VAPT Engineer – Cybersecurity & Payment Security -7+ years
WFO-Infopark,Kochi

Position Overview
We are looking for an experienced Senior VAPT Engineer with strong expertise in
application, network, cloud, and payment security. This role will lead vulnerability
assessment and penetration testing engagements across enterprise and fintech environments,
ensuring systems, applications, and payment infrastructures are resilient against real-world
cyber threats.
The role is client-facing and requires the ability to translate technical findings into clear
business and risk insights.


Key Responsibilities
VAPT & Security Assessment
• Lead end-to-end Vulnerability Assessment and Penetration Testing (VAPT)
engagements including scoping, execution, reporting, and remediation support.
• Perform black-box, grey-box, and white-box penetration testing on web applications,
APIs, networks, cloud, and infrastructure.
• Conduct advanced manual testing aligned with OWASP Top 10, SANS Top 25, and
MITRE ATT&CK.
• Design threat models and realistic attack scenarios based on current threat
intelligence.
Payment Security & FinTech Testing
• Perform protocol-level penetration testing on ISO 8583 financial messaging (MTI
manipulation, bitmap tampering, replay attacks).
• Conduct security testing of payment infrastructure including Payment Switches,
HSMs, POS systems, and payment gateways.
• Test payment APIs (REST/GraphQL) with focus on BOLA, mass assignment, and
transaction flow abuse.
• Review cryptographic implementations including AES, RSA, tokenization, and key
management to ensure PAN/CVV protection.
• Support PCI DSS v4.0 compliance through quarterly scans and annual penetration
testing of the CDE.
• Simulate fraud scenarios such as double-spend, refund abuse, and replay attacks in
collaboration with Risk teams.
Cloud, Mobile & Automation
• Conduct security assessments on AWS, Azure, and GCP environments, including
IAM and serverless components.
• Perform Android and iOS mobile application security testing (SSL pinning bypass,
root/jailbreak checks).
• Develop custom scripts and tools using Python, Bash, PowerShell, or Go to
automate testing activities.
Reporting & Client Communication
• Produce clear, concise VAPT reports with actionable remediation and secure-by
design recommendations.
• Present findings to technical teams and senior stakeholders.
• Act as a trusted security advisor to clients and internal teams.
Required Skills & Experience
• 7+ years of hands-on experience in VAPT, penetration testing, or security consulting.
• Strong expertise in application, network, cloud, and payment security.
• Deep understanding of ISO 8583, OWASP Top 10, and PCI DSS.
• Proficiency with tools such as Burp Suite, Nessus, Nmap, Metasploit, Wireshark,
OpenVAS.
• Experience with cloud security (AWS, Azure, GCP) and containerized environments.
• Strong scripting and automation skills.
• Excellent documentation and stakeholder communication skills.
Preferred Qualifications
• Certifications such as OSCP, OSCE, CPENT, GPEN, CREST, CISSP, CEH.
• Knowledge of PCI QSA processes or ISO 8583 fundamentals.
• Experience with fintech platforms, payment gateways (e.g., Stripe), and 3DS
authentication.
• Prior consulting or client-facing experience.

Application Security Expert – Red Team / Penetration Tester

Application Security Expert – Red Team / Penetration Tester
Position Overview
We seek an experienced Application Security Expert to join our Red Team. The role involves identifying and exploiting vulnerabilities across applications and IT environments, simulating real-world cyberattacks, performing advanced penetration testing, and providing security insights throughout the SDLC.

Key Responsibilities
Conduct full-scope red team engagements across web, mobile, cloud, network, and physical domains.
Perform adversary emulation using MITRE ATT&CK and threat intelligence.
Use and develop custom exploits and offensive tools (Cobalt Strike, Metasploit, Burp Suite, Kali).
Execute covert social engineering and physical security tests.
Exploit vulnerabilities and test detection/response capabilities.
Test web/mobile apps, APIs, cloud (AWS/Azure/GCP), networks, containers, Kubernetes, and CI/CD.
Identify complex vulnerabilities (logic flaws, auth issues, deserialization, privilege escalation).
Provide detailed remediation-focused reports.
Perform security assessments on AI/ML systems, including Large Language Models (LLMs), prompt injection testing, model abuse, data leakage risks, and adversarial attacks
Work with dev, DevOps, and security teams to embed security testing early.
Influence secure design and promote security awareness.
Retest fixes and automate testing workflows.
Prepare technical reports and executive summaries; present findings to teams and leadership.
Required Skills & Qualifications
6 - 8 years in application security, penetration testing, or red teaming.
Expertise with offensive tools (Metasploit, Burp Suite, Cobalt Strike, Kali).
Strong exploitation skills across web, network (Kerberos, SMB, LDAP), and cloud (IAM, misconfig).
Proficient in Python, Java, C/C++, PowerShell, or Bash.
Strong understanding of web architecture, AI, LLM, API security, networking, cloud security, containers, and CI/CD.
Certifications:

OSCP – Required
OSCE / OSWE – Highly preferred
CEH, GWAPT, OSEP, CRTO – Preferred

Lead VAPT Engineer – Cybersecurity & Risk Management

Lead VAPT Engineer – Cybersecurity & Risk Management
In-Office Kochi, Kerala, India
Job Title: Lead VAPT Engineer – Cybersecurity & Risk Management
Employment type : Permanent / Contract

Position Overview:
We are looking for a highly skilled and experienced Senior VAPT Engineer to join our cybersecurity team. The ideal candidate will lead vulnerability assessment and penetration testing activities, identify security weaknesses, and provide actionable recommendations to improve security posture. This role is critical in ensuring the resilience of our clients’ applications, networks, and infrastructure against evolving cyber threats. The Lead VAPT Engineer will collaborate with cross-functional teams and deliver high-quality security assessments in a fast-paced, client-facing environment.

Key Responsibilities:
Client Engagement & Leadership
• Act as a trusted security advisor for multiple high-value clients.
• Manage end-to-end security assessment projects, including scoping, execution, reporting,
and remediation guidance.
• Conduct technical and executive-level briefings to communicate findings, risks, and strategic recommendations clearly.
• Translate complex technical vulnerabilities into business risk insights to help clients prioritize actions.
• Collaborate closely with client stakeholders to ensure security recommendations are
practical and actionable.
Advanced Threat Modelling & Risk Assessment • Design and maintain threat models tailored to client applications, networks, and cloud
environments.
• Perform risk assessments focusing on business impact and likelihood of exploitation.
• Develop attack scenarios based on the latest threat intelligence and real-world attacker
techniques.
• Guide clients in integrating security into their software development lifecycle (SDLC) and
cloud infrastructure designs.
Penetration Testing & Red Team Operations • Lead advanced black-box, grey-box, and white-box penetration testing engagements for web
applications, APIs, networks, and cloud environments.
• Conduct sophisticated Red Team exercises to simulate targeted attack campaigns.
• Design and develop custom exploits and testing tools to replicate specific attacker
techniques.
• Perform social engineering tests (phishing campaigns, physical security assessments) in
controlled and ethical scenarios.
• Provide detailed post-exercise analysis, including actionable remediation strategies and long term improvement plans.
Comprehensive Reporting & Documentation • Produce clear and technically thorough vulnerability assessment and penetration testing
reports.
• Create executive-level summaries focused on business impact and compliance risks.
• Maintain structured and up-to-date testing methodologies and playbooks.
• Contribute to internal knowledge base, documenting research, custom tools, and successful testing strategies.
Technical & Programming Expertise • Expert in vulnerability assessment and exploitation techniques across a wide range of
technologies.
• Proficient in security testing tools such as Burp Suite, Nessus, Metasploit, Nmap, OpenVAS, Cobalt Strike, Wireshark, and tcpdump.
• Strong scripting and automation skills (Python, Bash, PowerShell) to automate repetitive
testing tasks and tool workflows.
• Capable of custom tool development and advanced exploit research to target unique client
environments.
• Strong knowledge of application security vulnerabilities (OWASP Top 10, SANS Top 25) and attack surface analysis.
• In-depth understanding of cloud security risks, identity and access management, and
container security (Docker, Kubernetes).
Social Engineering & OSINT Expertise • Design and execute social engineering and phishing simulations tailored to client
environments.
• Perform physical security assessments through tactics like tailgating and badge cloning.
• Apply Open Source Intelligence (OSINT) techniques to gather reconnaissance data for
assessments.
• Provide training and awareness recommendations based on assessment outcomes.
Professional Attributes & Mindset
• Strong analytical, problem-solving, and creative thinking skills.
• Ethical hacker mindset with a continuous drive to research emerging threats, attack
techniques, and defense bypass methods.
• Methodical and detail-oriented approach to testing with the ability to think like an attacker.
• Strong communication and presentation skills, able to engage both technical teams and
business leadership.
• Proactively innovate by developing new tools, scripts, or methodologies to improve testing
efficiency and depth.
Preferred Qualifications • Certifications such as OSCP, GPEN, CREST CRT, CRTO are highly desirable.
• Experience in DevSecOps, CI/CD pipeline security, or automated security testing frameworks.
• Familiarity with industry compliance frameworks like PCI-DSS, GDPR, HIPAA, SOC2, and ISO 27001.
• Prior consulting experience in a service delivery or customer-facing environment.
• Experience with threat intelligence platforms and indicators of compromise (IoCs).

Required Qualifications:
• 7+ years of hands-on experience in Vulnerability Assessment, Penetration Testing, and
security consulting.
• Strong technical expertise in application security, network security, cloud security (AWS,
Azure, GCP), and infrastructure security testing.
• Proven experience using VAPT tools such as Burp Suite, Nessus, Qualys, Nmap, Metasploit, Nikto, OpenVAS, etc.
• Solid knowledge of exploitation techniques, post-exploitation frameworks, and manual
testing methodologies.
• In-depth knowledge of web application vulnerabilities (OWASP Top 10) and network protocol analysis.
• Experience conducting cloud security assessments, including misconfigurations, IAM
permissions analysis, and container security.
• Proficiency in scripting and automation (Python, Bash, PowerShell) to customize tests and
tools.
• Familiarity with security frameworks and standards such as NIST, ISO 27001, MITRE ATT&CK.
• Strong reporting and documentation skills, able to translate technical findings into business
friendly recommendations.
• Excellent communication and stakeholder management skills, able to lead client-facing
engagements.
• Relevant certifications are a strong plus (e.g., OSCP, CREST, CISSP, CEH, GIAC GPEN).