1 day ago
Bengaluru, IndiaStaff+
Responsibilities
- Lead security architecture reviews and establish secure design standards, patterns, and guardrails.
- Design and build security tooling, automation frameworks, and scalable security services.
- Own application security programs, including SAST, DAST, SCA, CI/CD security controls, vulnerability assessments, penetration testing, and security reviews.
- Define cloud, infrastructure, identity, network, secrets, logging, data protection, zero-trust, and infrastructure-hardening initiatives across AWS environments.
- Lead incident response, detection engineering, threat hunting, red team exercises, adversary simulations, and security validation.
- Drive enterprise security, endpoint security, device management, identity and access management, phishing response, and insider-threat monitoring.
- Partner with legal and compliance teams on SOC 2, ISO 27001, GDPR, privacy reviews, audits, and security governance.
- Mentor engineers and influence product, engineering, infrastructure, and business decisions across the organization.
Requirements
- 7+ years of experience in security engineering, application security, cloud security, or related technical security disciplines.
- Hands-on expertise across application security, cloud security, detection and response, and infrastructure security.
- Experience conducting vulnerability assessments and penetration testing across web, API, and mobile applications.
- Deep knowledge of SAST, DAST, SCA, CI/CD security tooling, threat modeling, secure architecture, and modern attack techniques.
- Experience securing cloud environments, with AWS preferred, and experience with EDR, DLP, SIEM, and threat detection technologies such as CrowdStrike.
- Strong programming or scripting skills using Python, Go, or similar languages.
- Experience leading architecture reviews, complex security initiatives, and engineering decisions at scale.
- Excellent communication skills and ability to communicate technical risks to engineering teams and senior leadership.
- Preferred experience includes e-commerce or consumer platforms, red teaming, adversary emulation, Terraform, OPA, Google Workspace, Okta, internal security tooling, cloud-native organizations, and certifications such as OSCP, OSWE, CISSP, or CCSP.
Benefits
- The role offers the opportunity to work on meaningful security challenges at a mission-driven company reshaping retail.
- Employment is contingent upon successful completion of a background check.
- Quince provides equal employment opportunities and reasonable accommodations for qualified individuals with disabilities.
About Quince
Quince is a direct-to-consumer ecommerce retailer that sells apparel, accessories, and home goods by connecting shoppers directly with manufacturing partners. Its manufacturer-to-consumer model uses demand-driven production and price transparency (including cost breakdowns) to reduce middlemen and inventory waste. Founded in 2018 and headquartered in San Francisco, the privately held company offers curated essentials across categories such as cashmere, linen, jewelry, and furniture through its online storefront.