Information Security Manager

Snabbit; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Snabbit in Bengaluru, India seeks an Information Security Manager to lead security across applications, APIs, and platforms as we scale. You will own policies, controls, risk management, and governance, partnering with engineering and product teams to embed security into how we build and operate at scale.

You will drive threat modelling, vulnerability management, and secure SDLC practices, raise security standards, and shape the security framework for Snabbit’s growing technology stack.

Qualifications

• Strong experience in Application Security, Product Security, or Information Security.

Responsibilities

• Own Application Security across backend, APIs, mobile and web apps.
• Secure the SDLC with threat modelling, security reviews, and secure coding practices.
• Find and fix risks via VAPT, SAST, DAST, SCA, and API security with timely remediation.
• Build and implement information security policies, standards, and controls.
• Drive security governance with risk assessments, audits, and compliance documentation.
• Partner with engineering, product, cloud and infra teams to mitigate security risks.
• Raise the security bar by instituting best practices across apps, infra, access management, and data protection.

Skills

App Security

Product Security

Info Security

OWASP

API Security

Threat Modelling

DevSecOps

Job description

We’re looking for a Information Security Manager

Snabbit is India’s first Quick-Service App delivering home services in just 10 minutes through a hyperlocal network of trained and verified professionals. Backed by top VCs in the country, Snabbit is redefining the home services space by combining speed, quality, and trust.

Founded by Aayush Agarwal, Snabbit is on a mission to make home services as seamless and instant as ordering groceries. We’ve already completed lakhs of jobs with exceptional customer satisfaction - and we’re just getting started.

The Opportunity

We’re looking for an Information Security professional to help build and strengthen Snabbit’s security foundation as we scale.

This role sits at the intersection of Application Security, Information Security, and Security Governance. You’ll work closely with engineering and product teams to make security a part of how we build, while also owning policies, controls, risk management, and compliance. The mandate is to ensure our systems, applications, and processes remain secure as Snabbit grows 10x.

What You’ll Do

• Own Application Security Build and strengthen application security across our backend, APIs, mobile and web applications.
• Secure the SDLC Embed security into the development lifecycle through threat modelling, security reviews, secure coding practices, and vulnerability management.
• Find & Fix Risks Drive application security testing including VAPT, SAST, DAST, SCA, and API security, and work with engineering teams to ensure timely remediation.
• Build the Security Framework Define and implement information security policies, standards, processes, and controls as Snabbit scales.
• Drive Governance Own security risk assessments, security controls, audits, compliance requirements, and security documentation.
• Partner with Engineering Work closely with engineering, product, cloud, and infrastructure teams to identify security risks and build practical solutions.
• Raise the Security Bar Establish security best practices across applications, infrastructure, access management, data protection, incident response, and third-party risk.

What We’re Looking For

• Strong experience in Application Security / Product Security / Information Security, with hands-on experience securing applications and APIs.
• Deep understanding of OWASP, API security, vulnerability management, threat modelling, secure SDLC, and DevSecOps.
• Experience with application security testing such as SAST, DAST, SCA, VAPT, and penetration testing.
• Strong understanding of Information Security policies, controls, risk management, and governance.
• Familiarity with security frameworks such as ISO 27001, SOC 2, NIST, or equivalent.
• A builder at heart - comfortable creating security processes and policies from the ground up rather than simply maintaining existing ones.
• Strong technical judgement: able to distinguish between theoretical risks and real business impact, and translate security requirements into practical solutions.
• Strong stakeholder management skills, with the ability to influence engineering and product teams without slowing down execution.

Why Snabbit?

• Build security from the ground up: Help shape the security foundation of a rapidly scaling consumer technology company.
• Company-wide impact: Influence how engineering and product teams build secure systems, not just how one application is secured.
• Technical + strategic: Stay close to technology while also owning security governance, policies, and risk.
• Hard problems, early enough: Many of the security challenges required for our next 10x are still ahead of us.
• High ownership: Move quickly, make consequential decisions, and see your work directly translate into a more secure Snabbit.

You’ll Thrive Here If You

You think about security as an enabler, not a blocker. You enjoy getting deep into applications and APIs, but can also step back and build the policies, controls, and processes needed to scale security across an organisation. You’re comfortable working with engineers, challenging assumptions, simplifying complexity, and taking ownership of security from risk identification through remediation.