Application Security Engineer 2

Zerodhafundhouse; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Zerodha Fund House in Bengaluru seeks a security-focused engineer to own the complete security layer of our cloud-based product. You will help protect data, ensure compliance, and drive secure design across the team.

You will collaborate with engineers to implement security controls, perform vulnerability assessments, and advance best practices for cloud, network, and application security.

Qualifications

• 3-6 years of experience in information security.
• Hacking mentality.
• Strong understanding of Unix-based systems.
• Scripting with Python and shell.
• Knowledge of cloud architectures and securing them.
• Data security in transit and at rest.
• Familiarity with web-app security concepts (OWASP-10).
• Strong networking and security concepts (VPNs, firewalls, VPCs).
• Familiar with security and compliance best practices.
• Familiarity with vulnerability scanners, IDS/IPS, WAF, and VAPT.
• Interest in building a security team.

Responsibilities

• Own the complete security layer at ZFH.
• Ensure good compliance, we work with a lot of regulated entities
• Assess and fix existing and new security considerations
• Work with other Engineers to encourage security as a design paradigm and establish good practices
• Enable security on the cloud for a modern product

Skills

Hacking mindset

Unix fundamentals

Python scripting

Shell scripting

Cloud security

Web security basics (OWASP)

Network security

VAPT tools

IDS/IPS

Firewalls

VPCs/VPNs

Security compliance

Team-building interest

Tools

Vulnerability scanners

IDS/IPS

Application Firewall

VAPT

Job description

At Zerodha Fund House, we are enabling the next generation of Indian investors. We feel mutual fund as a product needs to be re-imagined to build simple & relevant investment solutions for the next 10 crore individuals to participate in and grow the capital markets in India. We are building the founding team and are looking for smart and passionate people to join us.

Looking for experienced folks in the area of information security with a strong understanding of security, network vulnerabilities.

Responsibilities

• Own the complete security layer at ZFH.
• Ensure good compliance, we work with a lot of regulated entities
• Assess and fix existing and new security considerations
• Work with other Engineers to encourage security as a design paradigm and establish good practices
• Enable security on the cloud for a modern product

Requirements

• 3-6 years of relevant experience
• A hacking mentality
• Strong understanding of Unix based systems
• Scripting - Python, shell
• Understanding of cloud architectures and how to secure them
• Understanding of data security on the cloud, in rest and in motion
• Familiarity with web-app security concepts (SQL Injection, XSS, CSRF, RCE, IDOR etc.),OWASP-10
• Strong understanding of networks and security - analysis tools, penetration testing, firewalls, VPCs, VPNs
• Familiarity with security and compliance best practices
• Familiarity with tools for Vulnerability scanners, IDS/IPS, Application Firewall, VAPT
• Interest in building a team

Good to haves

• Interest in finance
• Understanding of Android-app security