Security Software Engineer

Alaan Visa; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Travel allowances

Gym memberships

Equity

Offsite events

Job summary

Alaan Visa in Bengaluru is seeking an Application or Product Security Engineer with 3–5 years of hands-on experience to secure web and mobile applications, APIs and cloud infrastructure. You will work with development teams to harden systems in line with industry standards.

Responsibilities include security reviews, AWS/GCP security, incident triage support, and contributing to security guidelines; a hybrid work culture and competitive compensation with equity are offered.

Qualifications

• 3–5 years of experience in Application Security or Product Security roles.
• Practical experience securing web applications and APIs, with a solid understanding of OWASP Top 10 and common attack vectors.
• Experience in threat modeling & secure code reviews.
• Good understanding of authentication & authorization flows.
• Understanding of secrets management and prevention of credential leaks.
• Working knowledge of IAM, networking, logging, and storage security.
• Experience using security scanning tools (SAST, SCA, DAST, IaC scanning) and validating findings.
• Ability to collaborate effectively with engineering teams and communicate security risks clearly.

Responsibilities

• Secure Web & Mobile applications, APIs by performing application security reviews/testing, identifying vulnerabilities, and working with engineering teams on remediation.
• Support security of AWS and GCP environments, including access reviews, network security, storage security, logging, and encryption best practices.
• Review cloud and infrastructure configurations to identify misconfigurations
• Support investigations during incidents triaging by reviewing security logs and alerts
• Contribute to security guidelines, standards, and continuous improvement of the security posture.

Skills

Application Security

Threat Modeling

Secure Code Review

OWASP Top 10

Authentication & Authorization

Secrets Management

IAM & Networking Security

Security Scanning Tools

Collaboration with Engineering

Tools

SAST

SCA

DAST

IaC Scanning

Job description

About the role

We are looking for an Application or Product Security Engineer with ~3–5 years of hands‑on experience in securing web and mobile applications, APIs and cloud infrastructure.

In this role, you will take ownership of securing our Applications, APIs and cloud resources, working closely with Development teams to continuously harden our applications and infrastructure in alignment with industry leading standards.

What you'll do

• Secure Web & Mobile applications, APIs by performing application security reviews/testing, identifying vulnerabilities, and working with engineering teams on remediation.
• Support security of AWS and GCP environments, including access reviews, network security, storage security, logging, and encryption best practices.
• Review cloud and infrastructure configurations to identify misconfigurations
• Support investigations during incidents triaging by reviewing security logs and alerts
• Contribute to security guidelines, standards, and continuous improvement of the security posture.

What we are looking for

• 3–5 years of experience in Application Security or Product Security roles.
• Practical experience securing web applications and APIs, with a solid understanding of OWASP Top 10 and common attack vectors.
• Experience in threat modeling & secure code reviews.
• Good understanding of authentication & authorization flows.
• Understanding of secrets management and prevention of credential leaks.
• Working knowledge of IAM, networking, logging, and storage security.
• Experience using security scanning tools (SAST, SCA, DAST, IaC scanning) and validating findings.
• Ability to collaborate effectively with engineering teams and communicate security risks clearly.

Bonus

• Experience of AWS or GCP security.
• Experience working in Financial, Banking, NBFC, FinTech or regulated environments.
• Basic understanding of logs and usage of SIEM tools for alert triage and investigation.
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, or PCI DSS.

What's in it for you

• Contribute to building the Middle East’s most beloved fintech brand from the ground up
• Benefit from a role with significant ownership and accountability
• Thrive in a flexible hybrid culture with ample work-life balance
• Participate in exciting offsite events
• Competitive salary and equity
• Enjoy additional perks like travel allowances, gym memberships, and more