Security Engineer

CellPoint Digital; Maharashtra; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary

Flexible work environment

Opportunities for personal and professional growth

Job summary

A fintech start-up in India is seeking a Security Engineer to enhance their security ecosystem. You will implement automated solutions for compliance, support project initiatives in cloud environments, and manage security operations. The ideal candidate has 4+ years of experience in security engineering, strong scripting skills, and is proficient with cloud technologies. Join to be part of a dynamic team aiming to revolutionize the payments landscape internationally.

Qualifications

• 4+ years of hands-on Security Engineering experience in a cloud-native environment.
• Strong scripting skills and experience with REST APIs.
• Proficiency in tuning EDR policies and managing access tools.

Responsibilities

• Implement and configure SIEM/SOAR solutions in GCP.
• Automate compliance evidence collection.
• Lead Disaster Recovery exercises and maintain readiness.

Skills

Security Engineering experience

Scripting skills (Python, Bash, Go)

Experience with REST APIs

GCP IAM and Networking

Tuning EDR policies (CrowdStrike)

Understanding of OWASP Top 10

Tools

Google Cloud Platform

CrowdStrike

Twingate

JumpCloud

Job description

Join CellPoint Digital: Shape the Future of Payments with Us!

At CellPoint Digital, we’re revolutionizing the way businesses in the air, travel, and hospitality sectors manage their payments.

With our Leading Payment Orchestration Platform, we’re turning payments into a strategic advantage, helping clients optimize their payment experience to boost profits, maximize approvals, lower costs and take control of their payment, resulting in more money to the bottom line.

We believe payments should be a strategic asset, delivering financial, customer, and operational value. Our vision is to unify the payment ecosystem, opening up a world of opportunities for leading brands in the air, travel, and hospitality industries. We transform the payment supply chain from a cost center into a profit engine, turning every transaction into an opportunity for growth and competitive advantage.

At our core, we're innovators and problem-solvers united by five key values: Mission First, Ownership, Trust & Transparency, Driven, and One Team. We're ambitious professionals who embrace accountability and transform payments together.

Our diverse community spans the globe, with hubs in Copenhagen, Dallas, Dubai, London, Miami, Pune, Buenos Aires, Bogota, Mexico, and Singapore, along with remote team members worldwide. We celebrate the unique perspectives and experiences that make our team extraordinary.

Join us as a Security Engineer on our mission to turn payments into possibilities!

Location: India Industry: Fintech / Payment Orchestration

Security Engineer

Join CellPoint Digital as a Security Engineer. You are the builder and the mechanic of our security ecosystem. Your mission is to turn architectural designs into high-performing, automated reality. In our 1-2-2 team model, you provide the technical "muscle" that allows our Architects to maintain compliance and our Lead to drive strategy.

You will be on the front lines of several critical greenfield projects: implementing our Just-In-Time (JIT) access platform, technically configuring our SIEM/SOAR within Google Cloud, and—crucially—automating our compliance evidence collection via the Sprinto GRC platform to eliminate manual toil. You are someone who believes that if a task has to be done twice, it should be scripted.

How You Will Make an Impact:

Automation & GRC Engineering: Support the Senior Architects by building and maintaining API integrations between our tech stack and Sprinto. Your goal is to eliminate manual evidence collection by writing automation (Python/Go) that feeds real-time configuration data from GCP, GitHub, and CrowdStrike into the GRC platform.

SIEM/SOAR Implementation (GCP SCC): Perform the technical setup and tuning of GCP Security Command Center. Build and maintain the automated "Playbooks" that allow our systems to self-remediate common security events (e.g., auto-isolating a compromised GKE pod).

Zero-Trust & Identity Operations: Execute the technical rollout of Ploy (JIT). Manage the day-to-day health and tuning of our Twingate (ZTNA) connectors and JumpCloud policies to ensure seamless, secure access for a global team.

Shift-Left & CI/CD Tuning: Maintain security scanners (SAST/DAST) within GitHub Actions. Work directly with developers to tune SonarCloud rules, reducing false positives and ensuring that the "Shift-Left" process is high-fidelity and low-friction.

Operational Defense & MDR Support: Act as the primary technical responder for escalations from our CrowdStrike MDR service. Perform hands‑on remediation, containment, and forensic investigation within the GCP environment.

Resilience & DRP Execution: Build and maintain the automation scripts used for Disaster Recovery (DRP) failover. Lead regular "Game Day" exercises to ensure that our recovery procedures are functional, documented, and meet RTO/RPO targets.

Automation Rate: Percentage of GRC evidence collected automatically via Sprinto APIs vs. manual uploads (Target: >80% of technical controls).

Mean Time to Remediate (MTTR): Tracking the speed of resolving critical vulnerabilities identified by SonarCloud or GCP SCC.

Tool Coverage: Ensuring 100% deployment of CrowdStrike and Twingate across all relevant endpoints and cloud workloads.

DRP Readiness: Successful execution of technical recovery playbooks during scheduled Disaster Recovery tests.

Skills you will have fine-tuned:

Experience: 4+ years of hands‑on Security Engineering experience in a cloud‑native (GCP preferred) environment.

The Automation Mindset: Strong scripting skills (Python, Bash, or Go) and experience working with REST APIs to connect disparate security tools.

GCP Hands‑on: Practical experience with GCP IAM, Networking, Log Router, and GKE (Google Kubernetes Engine).

Endpoint & Perimeter Expert: Proficiency in tuning EDR policies (CrowdStrike) and managing modern access tools (Twingate/JumpCloud).

AppSec Foundational Knowledge: A solid understanding of the OWASP Top 10 and experience integrating security tools into GitHub Actions pipelines.

Attention to detail, plus analytical and problem‑solving capabilities

Positive, service-oriented personality

Willingness to travel to our global locations

You are eager to bring your unique talents and authenticity to the CellPoint Digital community.

You're constantly curious and a lifetime learner.

You have excellent communication and relationship-building skills.

You enjoy leading and supporting cross‑functional initiatives and projects in a team where you are empowered and accountable.

You thrive in a fast‑paced environment and the challenge of managing multiple projects simultaneously while prioritizing high‑return work.

You approach challenges with a solution‑oriented mindset.

You are able to thrive in a ‘remote first’ arrangement with a distributed organization in multiple time zones.

What's in it for you:

We offer you the opportunity to be an innovator, challenge the status quo, and redefine the payments category

Competitive salary in a fast-growing start‑up

Opportunity for personal and professional growth in a dynamic industry

Work from anywhere in the world; we’re a fully distributed company, and we provide the tools, culture, and support to make your work setup work for you

What makes CellPoint Digital a leader in the payment landscape isn’t just our technology - it’s our people and how we work together. We’ve built a global community where diverse talents and perspectives unite to create innovative solutions. When you join us, you become part of something bigger: a collaborative culture that crosses borders and disciplines, bringing out the best in every team member to deliver breakthrough results for our clients and partners.

Together, we are transforming the payments industry - challenging, supporting, and inspiring one another in the process.

Please note, we retain applicant data for 12 months for recruitment purposes and future opportunities, after which it is securely deleted. At CellPoint Digital we are committed to be globally compliant with robust data protection.