Information Security - Technical Professional

Teciem; Bengaluru; On-site; INR 900,000 - 1,900,000; Full time

Job summary

Teciem designs, builds, and delivers treasury and capital markets software for financial institutions worldwide. An experienced Information Security Engineer will drive secure software development, test applications, and manage vulnerabilities across the SDLC.

The role requires collaboration with development, DevOps, and product teams to mitigate risks and ensure compliance with security standards like ISO 27001 and NIST. Strong tooling and certifications are preferred.

Qualifications

• 2-3 years in IT security roles or equivalent.
• Experience in secure coding practices and SDLC integration.
• Proficient in manual and automated security testing.
• Familiar with OWASP Top 10 and common vulnerability classes.

Responsibilities

• Perform SAST, DAST, and API security testing across enterprise apps.
• Review source code to identify vulnerabilities and advise remediation.
• Lead remediation efforts and retest fixes with development teams.
• Conduct web app and API penetration tests to uncover business logic flaws.
• Create testing checklists and document results for audits.

Skills

Application security testing

Threat modelling

Secure SDLC

Penetration testing

Security risk assessment

Education

CEH

OSCP

eWPT

ISO 27001 / CISM

Tools

Burp Suite

IBM AppScan

Acunetix

HP WebInspect

NTOSpider

Postman

Checkmarx

Job description

The Work We Do

Teciem designs, builds, and delivers treasury and capital markets software solutions for financial institutions worldwide. We serve banks of every size and geography, offering the right setup for the right need.

Our solutions are designed to replace multiple disconnected systems with one complete, front-to-back platform, helping customers to capture trading and business opportunities quickly, clearly and with control. We cover the entire trading lifecycle, ensuring that everything - from execution to position keeping, to risk management – runs smoothly.

With decades of experience and one of the largest, most diverse client bases in the industry, we turn deep industry knowledge into software that covers most asset classes, meets complex real-world treasury and capital market’s needs, and adapts as markets evolve.

We are seeking an experienced Information Security Engineer with a strong background in secure software development practices, application security testing, vulnerability management and Information Security Compliances. The ideal candidate will be responsible for ensuring that security is integrated across the software development lifecycle (SDLC) and will actively collaborate with development, DevOps, and product teams to mitigate application-level risks.

Responsibilities:

• Application Security

• Perform comprehensive application security assessments, includingStatic Application Security Testing (SAST) Pen testing,Dynamic Application Security Testing (DAST), andAPI security testingacross enterprise applications.

• Review and analyse source code to identify and remediate security vulnerabilities.

• Collaborate with development teams to integrate security best practices in the SDLC and provide secure coding guidance.

• Lead and support remediation efforts by providing actionable recommendations and retesting fixes.

• Conduct manual and automated web application and API penetration tests to uncover business logic and security flaws.

• Develop and maintain security testing checklists, processes, and internal documentation.

• Track and report vulnerabilities, ensuring timely closure in collaboration with development and product owners.

• Participate in threat modelling sessions and help teams prioritize risks based on severity and business impact.

• Stay current with emerging threats, vulnerabilities, attack vectors, and security technologies to proactively improve application security posture.

• Stay up to date on the latest security threats and vulnerabilities.

• Information Security Compliance:

• Ensure compliance with relevant security standards and regulations, including ISO 27001, NIST Standard regarding Devsecops

• Develop and maintain security documentation and procedures.

• Assist with external security audits and assessments.

Other Duties:

• Provide security consulting and support to other teams.

• Evaluate and recommend new security technologies and solutions.

• Participate in security awareness training and initiatives.

• Understanding of Technology & Security Risk Management and Vendor Risk Management Framework

• **Technical Skills and Capabilities (Primary – Must Have):**2-3 years’ experience working in IT Security in multiple capacities.Hands-on experience with application security tools such asBurp Suite, IBM AppScan, Acunetix, HP WebInspect, NTOSpider, Postman, checkmarx and others.Strong expertise inmanual and automated web application security testingand a deep understanding ofOWASP Top 10andbusiness logic vulnerabilities.Solid experience testing RESTful and SOAP APIs, analyzing request/response flows, and validating secure implementation.Strong knowledge of secure coding principles, common attack vectors (OWASP, SANS Top 25, WASC), and mitigation techniques.Familiarity with CI/CD pipelines and integrating security testing into DevOps workflows (preferred).Proficiency in bothBlack BoxandWhite Boxtesting methodologies.Certifications (Preferred):Certified Ethical Hacker (CEH), OSCP, eWPT , or equivalent security certifications are preferred.Certification like ISO 27001, CISM etc. would be an added advantage.

Diverse Minds, Shared Ambition

At Teciem, we believe that our strength comes from the diversity of our people. Different perspectives, backgrounds, and experiences fuel our innovation and help us build solutions that truly make a difference in the world of financial technology.

We’re committed to creating a workplace where everyone feels respected, heard, and empowered to grow. Here, you can bring your whole self to work, contribute your unique ideas, and be part of a team driven by shared ambition.

We welcome talent from all walks of life and encourage applications from individuals of all genders, races, ages, abilities, identities, and beliefs. Together, we’re shaping a culture where diversity isn’t just celebrated — it’s essential to our success.