Security Engineer

XYZ Venture Capital; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Salary access to earned wages

Comprehensive health coverage

Meaningful ownership from day one

Learn by building

Complimentary meals

Job summary

Refyne is seeking an experienced Security Engineer to secure our AWS cloud and fix security issues across NestJS, Python and Flutter services. You will own security end-to-end, drive secure coding standards, and ensure RBI/DPDP compliance.

You'll work as the first dedicated security engineer reporting to the VP of Engineering, shaping our security tooling and threat detection pipelines for a large internal user base across India.

Qualifications

• 5–8 years in security engineering with 3+ years in cloud security.
• Deep AWS security architecture knowledge (WAF, IAM, CloudTrail, Athena, S3, CloudFront, ALB, VPC).
• Ability to read, debug and ship production security fixes in TS/NestJS, Python or Dart/Flutter.
• Familiarity with RBI/DPDP compliance, VAPT triage, and vulnerability management lifecycles.
• Certs in AWS Security Specialty, OSCP or CISSP are a plus.

Responsibilities

• Integrate SAST/DAST, dependency and secret scanning into CI/CD pipelines (GitHub Actions, ECR, Helm).
• Perform manual code reviews, threat modeling (STRIDE), and production fixes across NestJS, Python and Flutter.
• Manage AWS WAF, IAM least-privilege policies, ALB/CloudFront configs and secure egress.
• Build Athena/CloudTrail/S3 queries to detect anomalies and monitor incidents.
• Coordinate RBI/DPDP audits and vulnerability SLAs.

Skills

Security engineering

AWS security

TypeScript/NestJS

Python

Dart/Flutter

OWASP Top 10

SAST/DAST

GitHub Actions

VAPT & RBI/DPDP compliance

Cloud security tooling

Tools

GitHub Actions & CI/CD

AWS WAF

CloudFront

IAM

Athena

CloudTrail

S3

Job description

JOB ROLE:

Security Engineer

Location: Refyne HQ, Bengaluru (On-site) | Team: Engineering | Reports To: VP of Engineering

About Refyne

Refyne is building the financial infrastructure of Bharat's workforce.

What began as an earned wage access solution for India's largest employers has grown into a full-spectrum financial platform spanning lending, insurance, savings and wealth. Refyne is trusted by some of the country's most valuable companies to power the financial lives of their people.

Today, Refyne has partnered with over 600+ top enterprises to bring fair, timely and responsible financial services to more than 10 million employees across India, helping employers drive a 90%+ employee retention rate.

One platform. Every employer. Bharat's entire workforce.

As India's economy scales, Refyne is building the foundational layer that lets every employee, across every workplace, access financial security with ease, convenience and dignity.

About the Role

Refyne powers salary access, loans, and enterprise integrations for millions of employees across India, making security critical to everything we build. As our first dedicated security engineer, you will divide your time between securing our AWS cloud setup and directly fixing code vulnerabilities across our NestJS, Python, and Flutter services.

You won't just file tickets—you will own security end-to-end by finding risks, writing the fixes, and keeping us compliant with RBI and DPDP regulations.

How You'll Make an Impact

• Application Security & Secure SDLC: Wire SAST/DAST, dependency, and secret scanning directly into CI/CD pipelines (GitHub Actions, ECR, Helm).
• Hands-on Vulnerability Remediation: Perform manual code reviews, threat modeling (STRIDE), and write production code fixes across NestJS, Python, and Flutter services for high-risk disbursal and repayment flows.
• AWS Cloud Security Posture: Manage AWS WAF, IAM least-privilege policies, ALB/CloudFront configs, and secure network egress across 50+ external vendor endpoints.
• Threat Detection & Forensics: Build Athena, CloudTrail, and S3 access log queries to detect anomalies, analyze security incidents, and track Sentry/CloudWatch signals.
• Regulatory Compliance & VAPT: Establish reproducible evidence trails for RBI and DPDP audits, coordinate penetration testing, and run vulnerability SLAs

What Makes You a Great Fit

• 5-8 years total in security engineering with 3+ years hands-on production cloud experience (BFSI/Fintech preferred).
• Deep AWS security architecture knowledge (WAF, IAM, CloudTrail, Athena, S3, CloudFront, ALB, VPC).
• Ability to read, debug, and ship production security fixes in at least two of: TypeScript/NestJS, Python, or Dart/Flutter.
• Practical mastery of OWASP Top 10, SAST/DAST tooling, and container scanning in GitHub Actions.
• Familiarity with RBI/DPDP compliance, VAPT triage, and vulnerability management lifecycles.
• Security certifications (AWS Security Specialty, OSCP, CISSP) are a strong bonus.

What You'll Be Part Of

The Team

You will be our first dedicated security hire, working directly alongside senior engineers and reporting to the VP of Engineering. It is a hands-on environment where you have full autonomy to establish secure coding standards, build automated scanning tooling, and shape our security culture without fighting legacy processes.

The Platform

Refyne is trusted by 600+ top enterprises to handle sensitive financial transactions for over 10 million employees. The cloud protections, secure code standards, and threat detection pipelines you build will directly safeguard the income and financial data of Bharat's workforce.

Perks at Refyne

• Access your salary, on your terms. Use the Refyne app to withdraw your earned salary whenever you need it.
• Comprehensive health coverage. Medical insurance for you and your loved ones, because your wellbeing comes first.
• Meaningful ownership from day one. Work in a flat organization where your ideas are heard and your contributions have real impact.
• Learn by building. Collaborate with experienced engineers in a culture that values quality, curiosity and continuous learning.
• Fuel for your best work. Enjoy complimentary breakfast, lunch and snacks at the office.

Why Join Refyne?

The companies driving India's growth understand that financially secure employees build stronger organisations and stronger economies. Refyne exists at that intersection: a single, trusted infrastructure that employers plug into and employees rely on, without friction or fragmentation.

Our solution helps workers cleanly bypass predatory debt traps to build real financial resilience, rather than simply pointing them toward financial products and stepping back. It's the financial backbone behind India Inc, built with the same permanence and scale as the roads and utilities that move the country forward.

That ambition is backed by results: Refyne is growing at a rapid 4x year-on-year pace, is already profitable and ranks globally as the second-largest player by revenue in our space. The company is also backed by $106 million from top global investors including Tiger Global, DST Global and ICICI Bank. For employers, that means a partner with the credibility, scale and staying power to be trusted at the infrastructure level. For employees, it means one platform that grows with every stage of their financial life.