Security Engineer

Refyne India; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Salary access

Health coverage

Ownership

Continuous learning

Free meals

Job summary

Refyne, Bengaluru, is seeking a dedicated Security Engineer to secure our AWS cloud and fix vulnerabilities across NestJS, Python, and Flutter. You will own security end-to-end, from discovery to fixes, ensuring RBI and DPDP compliance.

As the first security hire, you will implement secure coding standards, integrate SAST/DAST into CI/CD, and collaborate across teams to safeguard fintech platforms and protect employees’ financial data.

Qualifications

• 5–8 years total in security engineering with 3+ years hands-on production cloud experience.
• Deep AWS security architecture knowledge (WAF, IAM, CloudTrail, Athena, S3, CloudFront, ALB, VPC).
• Ability to read, debug, and ship production security fixes in at least two of: TS/NestJS, Python, or Dart/Flutter.
• Practical mastery of OWASP Top 10, SAST/DAST tooling, and container scanning in GitHub Actions.

Responsibilities

• Secure SDLC: integrate SAST/DAST, dependency and secret scanning into CI/CD pipelines (GitHub Actions, ECR, Helm).
• Remediate vulnerabilities via manual code reviews and production fixes in NestJS, Python, and Flutter services.
• Manage AWS security posture: WAF, IAM least privilege, ALB/CloudFront configs, secure egress for 50+ vendor endpoints.
• Develop threat detection and forensics queries using Athena, CloudTrail and S3 logs.
• Coordinate RBI/DPDP audits, conduct penetration testing, and track vulnerability SLAs.

Skills

AWS security

Threat modeling

Code remediation

OWASP Top 10

SAST/DAST

GitHub Actions

NestJS

Python

Dart/Flutter

Tools

AWS WAF

IAM

CloudTrail

Athena

S3

CloudFront

ALB

VPC

Job description

Location: Refyne HQ, Bengaluru (On-site) | Team: Engineering | Reports To: VP of Engineering

About Refyne

Refyne is building the financial infrastructure of Bharat's workforce.

What began as an earned wage access solution for India's largest employers has grown into a full-spectrum financial platform spanning lending, insurance, savings and wealth. Refyne is trusted by some of the country's most valuable companies to power the financial lives of their people.

Today, Refyne has partnered with over 600+ top enterprises to bring fair, timely and responsible financial services to more than 10 million employees across India, helping employers drive a 90%+ employee retention rate.

One platform. Every employer. Bharat's entire workforce.

As India's economy scales, Refyne is building the foundational layer that lets every employee, across every workplace, access financial security with ease, convenience and dignity.

About the Role

Refyne powers salary access, loans, and enterprise integrations for millions of employees across India, making security critical to everything we build. As our first dedicated security engineer, you will divide your time between securing our AWS cloud setup and directly fixing code vulnerabilities across our NestJS, Python, and Flutter services.

You won't just file tickets—you will own security end-to-end by finding risks, writing the fixes, and keeping us compliant with RBI and DPDP regulations.

How You'll Make an Impact

• Application Security & Secure SDLC: Wire SAST/DAST, dependency, and secret scanning directly into CI/CD pipelines (GitHub Actions, ECR, Helm).
• Hands-on Vulnerability Remediation: Perform manual code reviews, threat modeling (STRIDE), and write production code fixes across NestJS, Python, and Flutter services for high-risk disbursal and repayment flows.
• AWS Cloud Security Posture: Manage AWS WAF, IAM least-privilege policies, ALB/CloudFront configs, and secure network egress across 50+ external vendor endpoints.
• Threat Detection & Forensics: Build Athena, CloudTrail, and S3 access log queries to detect anomalies, analyze security incidents, and track Sentry/CloudWatch signals.
• Regulatory Compliance & VAPT: Establish reproducible evidence trails for RBI and DPDP audits, coordinate penetration testing, and run vulnerability SLAs

What Makes You a Great Fit

• 5–8 years total in security engineering with 3+ years hands-on production cloud experience (BFSI/Fintech preferred).
• Deep AWS security architecture knowledge (WAF, IAM, CloudTrail, Athena, S3, CloudFront, ALB, VPC).
• Ability to read, debug, and ship production security fixes in at least two of: TypeScript/NestJS, Python, or Dart/Flutter.
• Practical mastery of OWASP Top 10, SAST/DAST tooling, and container scanning in GitHub Actions.
• Familiarity with RBI/DPDP compliance, VAPT triage, and vulnerability management lifecycles.
• Security certifications (AWS Security Specialty, OSCP, CISSP) are a strong bonus.

What You'll Be Part Of

The Team

You will be our first dedicated security hire, working directly alongside senior engineers and reporting to the VP of Engineering. It is a hands-on environment where you have full autonomy to establish secure coding standards, build automated scanning tooling, and shape our security culture without fighting legacy processes.

The Platform

Refyne is trusted by 600+ top enterprises to handle sensitive financial transactions for over 10 million employees. The cloud protections, secure code standards, and threat detection pipelines you build will directly safeguard the income and financial data of Bharat's workforce.

Perks at Refyne

• Access your salary, on your terms. Use the Refyne app to withdraw your earned salary whenever you need it.
• Comprehensive health coverage. Medical insurance for you and your loved ones, because your wellbeing comes first.
• Meaningful ownership from day one. Work in a flat organization where your ideas are heard and your contributions have real impact.
• Learn by building. Collaborate with experienced engineers in a culture that values quality, curiosity and continuous learning.
• Fuel for your best work. Enjoy complimentary breakfast, lunch and snacks at the office.

Why Join Refyne?

The companies driving India's growth understand that financially secure employees build stronger organisations and stronger economies. Refyne exists at that intersection: a single, trusted infrastructure that employers plug into and employees rely on, without friction or fragmentation.

Our solution helps workers cleanly bypass predatory debt traps to build real financial resilience, rather than simply pointing them toward financial products and stepping back. It's the financial backbone behind India Inc, built with the same permanence and scale as the roads and utilities that move the country forward.

That ambition is backed by results: Refyne is growing at a rapid 4x year-on-year pace, is already profitable and ranks globally as the second-largest player by revenue in our space. The company is also backed by $106 million from top global investors including Tiger Global, DST Global and ICICI Bank. For employers, that means a partner with the credibility, scale and staying power to be trusted at the infrastructure level. For employees, it means one platform that grows with every stage of their financial life.