Security Engineer

Osfin.ai; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Opportunity to build security from the ground up

Work on real-world financial data systems

High ownership and visibility

Job summary

A leading fintech startup in Bengaluru is seeking a Security Engineer to design and maintain robust security systems. This role involves ensuring compliance, conducting vulnerability assessments, and collaborating with engineering teams for secure coding practices. The ideal candidate will have 3 to 8 years of experience in application and cloud security. Work includes automating security processes and driving compliance initiatives within a fast-paced environment, offering significant ownership and impact.

Qualifications

• 3 to 8 years of experience in application security, cloud security, or infrastructure security.
• Strong understanding of OWASP Top 10 and web application vulnerabilities.
• Hands-on experience with cloud platforms like AWS, GCP, or Azure.

Responsibilities

• Design and implement secure architecture across cloud-native applications.
• Conduct threat modeling and vulnerability assessments.
• Build and maintain security monitoring and incident response frameworks.

Skills

Application security

Cloud security

Infrastructure security

Threat modeling

Vulnerability assessments

Penetration testing

IAM policies

DevSecOps

Scripting skills (Python, Bash)

Tools

Burp Suite

Nessus

Metasploit

Snyk

Splunk

ELK

Job description

Founded by alumni from IIT and ISB, Osfin.ai stands at the forefront as an emerging global B2B SaaS firm. Our core mission is to fully automate the intricate financial operations that enterprises grapple with daily. On this journey, we’ve collaborated with a diverse clientele, including global banks, premier fintechs, leading e-commerce platforms, and the next generation of unicorns. With our innovative solutions, we’ve successfully transformed our customers' cumbersome FinOps processes, helping them achieve operational and commercial excellence.

Role Overview

We are looking for a Security Engineer to design, implement, and maintain robust security systems that protect our platform, infrastructure, and customer data. This role is critical in ensuring compliance, managing risks, and embedding security best practices across the product lifecycle.

Key Responsibilities

• Design and implement secure architecture across cloud-native applications and infrastructure
• Conduct threat modeling, vulnerability assessments, and penetration testing
• Build and maintain security monitoring, alerting, and incident response frameworks
• Implement and manage IAM (Identity & Access Management) policies and controls
• Collaborate with engineering teams to integrate secure coding practices (DevSecOps)
• Drive compliance initiatives (e.g., SOC 2, ISO 27001, PCI-DSS readiness)
• Automate security processes, including CI/CD security checks, SAST/DAST tools
• Investigate and respond to security incidents and breaches
• Conduct security audits and risk assessments across systems and vendors
• Stay updated on emerging threats and recommend proactive measures

Required Qualifications

• 3 to 8 years of experience in application security/cloud security/infrastructure security
• Strong understanding of OWASP Top 10 and web application vulnerabilities
• Experience with cloud platforms (AWS, GCP, Azure) and securing cloud environments
• Hands‑on with tools such as Burp Suite, Nessus, Metasploit, Snyk, or similar
• Knowledge of network security, encryption, firewalls, VPNs
• Familiarity with CI/CD pipelines and DevSecOps practices
• Experience with logging and SIEM tools (e.g., Splunk, ELK)
• Solid scripting skills (Python, Bash, or similar)

Good to Have

• Experience in fintech/payments/banking systems
• Exposure to data security, privacy regulations (GDPR, DPDP Act India)
• Certifications such as CEH, CISSP, OSCP, or AWS Security Specialty
• Experience in container security (Docker, Kubernetes)
• Knowledge of zero‑trust architecture

What We’re Looking For

• Strong problem‑solving mindset with a proactive approach to security
• Ability to work in a fast‑paced startup environment
• High ownership and ability to drive security initiatives end‑to‑end
• Strong communication skills to work across technical and non‑technical teams

Why Join Us

• Opportunity to build security from the ground up in a high‑growth fintech startup
• Work on real‑world financial data systems at scale
• High ownership, visibility, and impact