Security Engineer

WebEngage; Mumbai; On-site; INR 800,000 - 1,200,000; Full time

Benefits offered by this job

Cutting-edge tools and mentorship

Best-in-class medical insurance

Contemporary Leave Policy

Job summary

A leading customer engagement platform in Mumbai is looking for a Security and Compliance Engineer. The role requires maintaining security posture and ensuring compliance with standards like ISO 27001. Key responsibilities include conducting penetration tests, collaborating with vendors, and leading security projects. The ideal candidate has a Bachelor’s degree in Engineering, 3-5 years of experience in security, and excellent communication skills. Benefits include learning opportunities and comprehensive medical insurance.

Qualifications

• 3 to 5 years of relevant experience in security, compliance or a similar role.
• Experience with security compliance frameworks such as ISO 27001, ISO 27701, or SOC 2 is preferred.

Responsibilities

• Conduct penetration tests to identify vulnerabilities.
• Coordinate with external VAPT vendors for audits.
• Lead security-related projects and provide updates.

Skills

SaaS application security understanding

Cloud platforms familiarity (AWS, GCP, Azure)

Networking concepts knowledge

Scripting language proficiency

Common security risks awareness

Verbal and written communication skills

Continuous learning commitment

Education

Bachelor’s degree in Engineering or related field

Job description

WebEngage is an enterprise-grade customer engagement and retention platform that helps global brands across industries such as e-commerce, fintech, travel, edtech, gaming, media and consumer apps turn data into measurable revenue impact.

Trusted by 800+ brands globally, we have a strong presence in India, UAE, KSA, SEA, Europe and beyond. WebEngage powers intelligent, real-time engagement across the entire customer lifecycle.

Position Overview

We are seeking a skilled Security and Compliance Engineer to join our team. In this role you will play a pivotal part in maintaining and enhancing our security posture, ensuring compliance with industry standards, and collaborating across teams to mitigate risks. This position involves hands‑on technical work, process optimisation and project management in a dynamic SaaS environment.

Responsibilities

• Conduct penetration tests using specialised tools to identify vulnerabilities and collaborate with Development or DevOps teams to plan and implement remediation strategies.
• Coordinate with external VAPT vendors for audits, serving as the liaison between the vendor and the engineering team.
• Partner with the DevOps team to perform cloud security audits and develop remediation plans.
• Respond to security questionnaires from customers or vendors and address security‑related questions during virtual meetings.
• Lead security‑related projects, providing regular progress updates and reports.
• Implement and configure tools to enhance security practices, including static code analysis and automated code audits.
• Manage the security calendar and execute activities such as:
  • Cloud Business Continuity Planning (BCP) and Disaster Recovery (DR) exercises in collaboration with the DevOps team.
  • Cryptographic audits (including encryption at rest and in transit) and key rotation processes with DevOps support.
  • Audits of automated code quality checks within CI/CD pipelines.
  • Reviews of standard operating procedures to ensure adherence and timely execution.
• Oversee the compliance calendar for standards such as ISO 27001, ISO 27701, SOC 2, and future certifications, including:
  • Coordinating with responsible teams to ensure all required activities are completed on schedule.
  • Responding to technical and process‑related inquiries during audits alongside other team members.
• Monitor and ensure employee security training and retraining programs are up to date.
• Track and maintain all security‑related metrics.
• Handle any additional audit‑related tasks.

Required Qualifications

• Strong understanding of SaaS applications and associated security challenges.
• Familiarity with one or more cloud platforms, such as AWS, GCP, or Azure.
• Knowledge of fundamental networking concepts, including OSI layers, TLS protocols and cryptography.
• Proficiency in at least one scripting language (e.g., Python, Java, Node.js).
• Awareness of common security risks, including OWASP Top 10, CIS Benchmarks and recent CVE vulnerabilities.
• Excellent verbal and written communication skills for interacting with internal and external stakeholders, as well as project reporting.
• Commitment to continuous learning and staying current with evolving security trends.

Preferred Skills And Knowledge

Experience with security compliance frameworks such as ISO 27001, ISO 27701, SOC 2, HIPAA or similar; relevant cybersecurity certifications are a plus.

Minimum Qualifications

• Bachelor’s degree in Engineering or equivalent in a related field such as Computer Engineering, Electronics or Telecommunications.
• 3 to 5 years of relevant experience in security, compliance or a similar role.

Life At WebEngage

• We take transparency very seriously. Get a full view of team goals and a top‑level view across the board with our monthly & quarterly town hall meetings.
• A highly inclusive work culture that promotes a relaxed, creative and productive environment.
• Practice autonomy, open communication and growth opportunities while maintaining a perfect work‑life balance.

Perks & Benefits

• Learning is a way of life. Unlock your full potential with cutting‑edge tools and mentorship (MacBook for Engagers!).
• Get the best‑in‑class medical insurance (with Covid Care facilities), programmes for taking care of your mental health and a Contemporary Leave Policy (beyond sick leaves).

WebEngage aims to be an equal opportunity employer. We strongly believe that when people feel respected and included they can be more creative, innovative, and successful. We believe that change is the only constant and are in the process – and will continue to be – of adapting to changing times to advance diversity and inclusion. We take affirmative action to ensure equal opportunity and complete non‑disclosure of all applicants without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or any other characteristic not mentioned herein above which are protected under the law.