Senior Security Engineer
Greenlight9 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Execute product security strategy aligned with company goals and risk appetite.
- Build and operate security automation for code scanning, dependency risk management, secrets detection, policy-as-code, and CI/CD integration.
- Perform security-focused design and implementation reviews, threat modeling, penetration testing, fuzzing, and vulnerability remediation validation.
- Develop AI-assisted tools and serve as a security subject matter expert for AI and LLM systems.
- Lead PSIRT vulnerability triage, incident response, on-call support, and product-related security events.
- Develop software supply chain protections including SBOM generation and verification, artifact signing and attestation, and provenance enforcement.
- Create static and dynamic analysis automation, dashboards, alerts, and reusable security frameworks.
- Partner with engineering, product, and platform teams to establish secure development standards and security-by-design practices.
- Educate and mentor engineers while promoting secure engineering and security awareness.
Requirements
- At least 5 years of experience finding security vulnerabilities, conducting security code reviews, and applying secure code development practices.
- 2–4 years of experience with threat modeling and identifying design problems from technical architectures and data-flow diagrams.
- Experience exploiting common security vulnerabilities and writing exploits.
- Deep knowledge of web and mobile application security, secure coding, exploit mitigations, and secure architecture patterns.
- Experience building or integrating AI-powered tools for vulnerability detection, code review, threat modeling, or security-process automation.
- Experience implementing and managing product security tools such as API security, mobile protection, SAST, and runtime scanning.
- Hands-on experience with SAST, DAST, IAST, penetration testing, scripting, and automation; fuzzing experience is preferred.
- Strong understanding of cloud security principles in AWS environments and CI/CD pipelines for web and mobile applications.
- Strong communication, collaboration, product judgment, and ability to explain complex security concepts to technical and non-technical audiences.
- Nice-to-have qualifications include IoT hardware and firmware security assessment, security-community contributions, and experience in fintech or other regulated companies.
Tech Stack
Categories
About Greenlight
Greenlight builds a family finance and safety platform centered on a debit card for kids and a mobile app for parents, offering tools for earning, saving, spending, giving, and investing, plus GPS trackers and a Family Hub. It sells consumer subscriptions and partners with banks, employers, and schools to distribute the service. Founded in 2014 and headquartered in Atlanta, its products are used by more than 6.5 million family members.