9 months ago
Bengaluru, IndiaMid Level / Senior
Responsibilities
- Work across cloud, infrastructure, data, and information security, focusing on AWS-based systems.
- Identify security issues, coordinate mitigation with stakeholders, and design and implement solutions for complex security problems.
- Own and improve the cloud security posture management program aligned with NIST 800-53 and ISO 27001.
- Own cloud workload protection, including alert investigation and triage.
- Drive data security through data classification, masking, and protection of large-scale data stores.
- Automate infrastructure security and build security tooling to reduce manual effort.
- Conduct security design, infrastructure, and architecture reviews.
- Build, operate, and maintain cloud security platforms supporting prevention, detection, and response.
- Translate product requirements into threat models and identify security risks.
- Build internal security frameworks, enable compliance with PCI DSS, ISO 27001, and DPDPA, and promote security best practices.
- Drive security awareness and engineering maturity across the organization.
Requirements
- Require 2–6 years of information security experience.
- Strong fundamentals in computer networks, operating systems, Linux, containers, and secure cloud architecture.
- Strong programming skills in Python, Go, or Bash.
- Hands-on cloud security experience with AWS, GCP, or Azure.
- Experience building and automating custom security tools.
- Understanding of microservices, CI/CD pipelines, containers, and securing containerized workloads.
- Strong understanding of least privilege, defense-in-depth, and zero trust.
- Security projects on GitHub or technical blogs.
- Strong communication skills and the ability to partner with engineering and product teams.
- Basic understanding of LLMs, MCP, and AI agents, with interest in building AI-driven security workflows.
- Familiarity with vulnerability management, patching cycles, and CVSS.
Benefits
- In-house pantry with lunch and dinner provided.
- Paid sick leave.
- Comprehensive health insurance.
- No fixed work timings are specified; the company emphasizes flexible productivity-based work.
- Employees receive their salaries before their joining date.
About CRED
CRED builds a consumer fintech app for creditworthy users in India to pay credit card and household bills, track spending, and earn rewards. Its products span payments, credit score tracking, and access to offers and credit lines through banking and NBFC partners; revenue comes from payments and merchant and lending partnerships. Founded in 2018 and headquartered in Bengaluru, it is privately held and focused on the Indian market.