Application Security Engineer 2

Zerodha Fund House; Bengaluru; On-site; INR 1,500,000 - 3,000,000; Full time

Job summary

Zerodha Fund House is seeking an experienced information security professional to own the security stack for the company. You will work to protect cloud-based products, ensure compliance with regulatory standards, and partner with engineers to bake security into design decisions.

The role emphasizes hands-on security, vulnerability assessment, and capability-building within a growing fintech team in Bengaluru. Relevant cloud and secure coding experience is essential.

Qualifications

• 3–6 years of relevant information security experience.
• Strong understanding of security concepts and best practices.
• Experience with cloud security, network security, and data protection.

Responsibilities

• Own the complete security layer at Zerodha Fund House.
• Ensure regulatory/compliance alignment with partners and regulators.
• Assess, design, and fix security issues across systems.
• Collaborate with engineers to embed security by design.
• Enable security on cloud-based products and platforms.

Skills

Hacking mindset

Unix-based systems

Security & compliance best practices

Interest in building a team

Tools

Python

Shell scripting

Cloud security

Data security (rest/in motion)

OWASP-10

Penetration testing

Firewalls

VPCs

VPNs

IDS/IPS

VAPT tools

Job description

At Zerodha Fund House, we are enabling the next generation of Indian investors. We feel mutual fund as a product needs to be re-imagined to build simple & relevant investment solutions for the next 10 crore individuals to participate in and grow the capital markets in India. We are building the founding team and are looking for smart and passionate people to join us.

Looking for experienced folks in the area of information security with a strong understanding of security, network vulnerabilities.

Responsibilities

• Own the complete security layer at ZFH.
• Ensure good compliance, we work with a lot of regulated entities
• Assess and fix existing and new security considerations
• Work with other Engineers to encourage security as a design paradigm and establish good practices
• Enable security on the cloud for a modern product

Requirements

• 3-6 years of relevant experience
• A hacking mentality
• Strong understanding of Unix based systems
• Scripting - Python, shell
• Understanding of cloud architectures and how to secure them
• Understanding of data security on the cloud, in rest and in motion
• Familiarity with web-app security concepts (SQL Injection, XSS, CSRF, RCE, IDOR etc.),OWASP-10
• Strong understanding of networks and security - analysis tools, penetration testing, firewalls, VPCs, VPNs
• Familiarity with security and compliance best practices
• Familiarity with tools for Vulnerability scanners, IDS/IPS, Application Firewall, VAPT
• Interest in building a team

Good to haves

• Interest in finance
• Understanding of Android-app security