Cybersecurity Auditor

About Lyzr

Lyzr is a Series A–backed enterprise AI company building a full-stack agent infrastructure platform that helps organizations design, deploy, and govern AI agents. Our platform enables enterprises to move beyond isolated AI use cases and into reliable, production-grade agentic workflows with strong controls around security, accuracy, and compliance.

Recognized by Accenture and Harvard Business School–led innovation ecosystems, Lyzr works with global enterprises to reimagine complex workflows using agentic AI. We focus on making AI agents dependable at scale - so teams can replace fragmented tool stacks with a unified, governed intelligence layer.

About the Role

As Lyzr accelerates its growth across enterprise banking, financial services, and highly regulated industries, establishing robust, independent technical governance is critical. We are seeking a Senior Cyber Security Auditor to join our newly formed Security Audit Team.

What You’ll Own

1. Platform & AI Tech Stack Auditing (2LOD)

Conduct continuous static and dynamic security assessments (SAST/ DAST/ IAST) across Lyzr’s core codebases, API layers, and multi-tenant microservices.

Audit AI agent orchestration workflows, evaluating prompt security, token limits, access boundary controls, and agent execution logs to prevent unauthorized data access or non-deterministic behavior.

Perform regular penetration testing and threat modeling across internal and external endpoints.

2. Cloud Infrastructure & Configuration Audit

Continually audit and monitor Lyzr’s primary AWS cloud environment (IAM, KMS, Security Hub, GuardDuty, VPC networking) and secondary Microsoft Azure footprints for misconfigurations, excessive permissions, or infrastructure drift.

Validate container and cluster security posture across Kubernetes/Docker deployment pipelines and automated CI/CD workflows.

3. Governance, Oversight & Risk Escalation

Function as an objective 2LOD oversight body, reviewing and validating the security controls, code practices, and remediation efforts executed by 1LOD engineering and IT teams.

Log, track, and maintain an independent technical risk register, providing direct, uncompromised reporting and quarterly audit updates to the COO.

Support external SOC 2, ISO 27001, and regulatory readiness by maintaining rigorous, audit-ready operational logs and control evidence.

What We’re Looking For

5+ years of hands-on experience in technical security auditing, red teaming, penetration testing, or 2LOD security risk engineering within high-growth SaaS, fintech, or cloud platforms.

Cloud Platform Expertise: Deep technical mastery of AWS security architecture (Identity, KMS, Network Isolation, CloudTrail) with solid working proficiency in Microsoft Azure security controls.

AI & Platform Security: Strong understanding of emerging AI attack vectors (e.g., prompt injection, data exfiltration via agents, insecure output handling) and familiarity with safety frameworks such as the OWASP Top 10 for LLMs.

Tooling Proficiency: Hands-on experience with modern security auditing software (e.g., Wiz, Snyk, Prisma Cloud, SonarQube, Burp Suite, AWS Inspector).

Communication & Objectivity: Exceptional technical writing and communication skills, with the ability to articulate complex security risks directly to executive leadership while maintaining constructive, independent relationships with 1LOD engineering leads.

Why Join Lyzr

• Join a fast-growing AI company in an exciting market
• Be part of a high-performance sales culture
• Receive coaching, structure, and clear growth opportunities
• Build valuable enterprise sales experience with global customers Preferred Certifications: CISSP, CISA, CCSP, AWS Certified Security – Specialty, or Certified Red Team Professional (CRTP).