Security Engineer 3

3 days ago

Bengaluru, IndiaSenior

Responsibilities

Design and implement security automation frameworks for threat detection, remediation, and compliance validation across cloud and application layers.
Develop tools and scripts that improve security visibility across AI model pipelines, APIs, and data integrations.
Integrate SAST, DAST, SCA, and IaC scanning security controls into CI/CD workflows.
Lead periodic vulnerability assessments and penetration testing for web applications, mobile applications, agentic AI platforms, and connected services.
Secure AWS environments using native and third-party tooling, including IaC security baselines and automated configuration drift detection.
Configure and manage WAF rules for DDoS mitigation and bot protection.
Enforce secrets management, IAM policies, and container security practices across production workloads.
Collaborate with engineering teams on vulnerability remediation, threat modeling, code reviews, secure coding, and secure SDLC practices.
Conduct internal security training and phishing simulations.
Apply AI model security and data privacy principles to protect sensitive data flows.
Contribute to the implementation and maintenance of ISO 27001, SOC 2, DPDPA, and PCI DSS controls.

6+ years of experience in product security or a related field.
Hands-on experience with security assessments, threat modeling, code reviews, and penetration testing.
Strong understanding of secure coding practices and secure SDLC principles.
Proficiency in scripting languages such as Python, Bash, or similar.
Working knowledge of OWASP, static and dynamic analysis tools, CWE, CVSS, and common security frameworks.
Experience with AWS infrastructure security and securing PII and sensitive content.
Understanding of RBI, NPCI, SOC 2, DPDPA, and ISO 27001 compliance frameworks.
Strong communication, collaboration, analytical, problem-solving, project prioritization, and cross-functional influencing skills.
Experience in a fintech or startup environment is preferred.
Knowledge of red teaming methodologies is preferred.
Certifications such as OSCP, AWS Security Specialty, GCP Security Specialty, CEH, CISSP, or CKS are preferred.
Exposure to multi-cloud environments including AWS and GCP is preferred.

Ownership-oriented culture with projects taken through to completion.
Work on meaningful financial technology and customer experience problems.
Environment that values healthy debate, ownership, commitment, and continuous growth.