Information Security - Technical Professional

TI2 Tupargon India Private Limited; Bengaluru; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

Teciem in Bengaluru designs and delivers treasury software and seeks an Information Security Engineer to embed security across the SDLC, work with DevOps and product teams, and protect enterprise applications. You will perform SAST/DAST and API testing, review code, and help shape secure coding guidelines, threat modelling, and vulnerability remediation; certification is preferred.

This role emphasizes staying ahead of threats and collaborating across engineering to maintain robust security

Qualifications

• 2-3 years’ experience working in IT Security in multiple capacities.
• Hands-on with application security tools such as Burp Suite, AppScan, Acunetix, WebInspect, NTOSpider.
• Strong knowledge of OWASP Top 10 and secure coding practices.

Responsibilities

• Perform comprehensive application security assessments, including SAST/DAST and API security testing.
• Review source code to identify vulnerabilities and remediate.
• Collaborate with development teams to integrate security into the SDLC and provide secure coding guidance.
• Lead remediation efforts and retest fixes.
• Stay current with threats and security technologies to proactively improve security posture.

Skills

Security testing

Threat modelling

DevSecOps familiarity

Secure coding knowledge

Tools

Burp Suite

IBM AppScan

Acunetix

HP WebInspect

NTOSpider

Postman

Checkmarx

Job description

The Work We Do Teciem designs, builds, and delivers treasury and capital markets software solutions for financial institutions worldwide. We serve banks of every size and geography, offering the right setup for the right need. Our solutions are designed to replace multiple disconnected systems with one complete, front-to-back platform, helping customers to capture trading and business opportunities quickly, clearly and with control. We cover the entire trading lifecycle, ensuring that everything - from execution to position keeping, to risk management – runs smoothly. With decades of experience and one of the largest, most diverse client bases in the industry, we turn deep industry knowledge into software that covers most asset classes, meets complex real-world treasury and capital market's needs, and adapts as markets evolve. We are seeking an experienced Information Security Engineer with a strong background in secure software development practices, application security testing, vulnerability management and Information Security Compliances. The ideal candidate will be responsible for ensuring that security is integrated across the software development lifecycle (SDLC) and will actively collaborate with development, DevOps, and product teams to mitigate application-level risks.

Responsibilities:

• Application Security Perform comprehensive application security assessments, including Static Application Security Testing (SAST) Pen testing, Dynamic Application Security Testing (DAST), and API security testing across enterprise applications.
• Review and analyse source code to identify and remediate security vulnerabilities.
• Collaborate with development teams to integrate security best practices in the SDLC and provide secure coding guidance.
• Lead and support remediation efforts by providing actionable recommendations and retesting fixes.
• Conduct manual and automated web application and API penetration tests to uncover business logic and security flaws.
• Develop and maintain security testing checklists, processes, and internal documentation.
• Track and report vulnerabilities, ensuring timely closure in collaboration with development and product owners.
• Participate in threat modelling sessions and help teams prioritize risks based on severity and business impact.
• Stay current with emerging threats, vulnerabilities, attack vectors, and security technologies to proactively improve application security posture.
• undefined Information Security Compliance: Ensure compliance with relevant security standards and regulations, including ISO 27001, NIST Standard regarding Devsecops
• Develop and maintain security documentation and procedures.
• Assist with external security audits and assessments.
• Stay up to date on the latest security threats and vulnerabilities.
• Other Duties: Provide security consulting and support to other teams.
• Evaluate and recommend new security technologies and solutions.
• Participate in security awareness training and initiatives.
• Understanding of Technology & Security Risk Management and Vendor Risk Management Framework
• undefinedTechnical Skills and Capabilities (Primary – Must Have):2-3 years’ experience working in IT Security in multiple capacities.
• Hands-on experience with application security tools such as Burp Suite, IBM AppScan, Acunetix, HP WebInspect, NTOSpider, Postman, checkmarx and others.
• Strong expertise in manual and automated web application security testing and a deep understanding of OWASP Top 10 and business logic vulnerabilities.
• Solid experience testing RESTful and SOAP APIs, analyzing request/response flows, and validating secure implementation.
• Strong knowledge of secure coding principles, common attack vectors (OWASP, SANS Top 25, WASC), and mitigation techniques.
• Familiarity with CI/CD pipelines and integrating security testing into DevOps workflows (preferred).
• Proficiency in both Black Box and White Box testing methodologies.
• Certification like ISO 27001, CISM etc. would be an added advantage.

Certifications (Preferred):

• Certified Ethical Hacker (CEH), OSCP, eWPT, or equivalent security certifications are preferred.

Diverse Minds, Shared Ambition

At Teciem, we believe that our strength comes from the diversity of our people. Different perspectives, backgrounds, and experiences fuel our innovation and help us build solutions that truly make a difference in the world of financial technology. We’re committed to creating a workplace where everyone feels respected, heard, and empowered to grow. Here, you can bring your whole self to work, contribute your unique ideas, and be part of a team driven by shared ambition. We welcome talent from all walks of life and encourage applications from individuals of all genders, races, ages, abilities, identities, and beliefs. Together, we’re shaping a culture where diversity isn’t just celebrated — it’s essential to our success.

Purpose – Why we exist

We empower financial institutions to build resilient and future-ready economies, worldwide.

Vision – What the future holds

To lead innovation in treasury and capital markets technology, building on the solid foundations of our mission -critical and industry - defining solutions.

Mission – How we get there

We place our clients' success and ambitions at our core, continuously evolving and innovating our solutions to deliver outstanding business value and real economic impact. You help us simplify Treasury and capital markets can be intricate, but you play a key role in making them easier to navigate. Your ideas and expertise help us transform complicated processes into intuitive, streamlined solutions used by financial institutions worldwide. Every improvement you make creates clarity, efficiency, and real-world impact for our clients. You shape the future with AI, every day AI isn’t a buzzword here — it’s embedded in how we build, innovate, and deliver. Whether you’re working on smarter automation, data-driven insights, or enhanced user experiences, your contribution fuels the next generation of intelligent financial technology. You’ll be part of a team that uses AI to make our products faster, sharper, and more meaningful for the industry. You grow through collaboration