Security Engineer 2

Zerodhafundhouse; India; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Zerodha Fund House in India is seeking an experienced information security engineer to own the security layer for the platform and help embed security as a design principle across cloud-based services.

You will work with engineers to tighten controls, assess vulnerabilities, support regulatory compliance, and build a security-minded culture as the product scales.

Qualifications

• 3-6 years of relevant experience.
• A hacking mentality and proactive security mindset.
• Strong understanding of Unix-based systems.
• Experience with scripting in Python and shell.
• Understanding of cloud architectures and how to secure them.
• Knowledge of data security in rest and in motion.
• Familiarity with web-app security concepts (OWASP-10).
• Knowledge of networks, security analysis tools, and penetration testing.
• Familiarity with security and compliance best practices.
• Interest in building a security team.

Responsibilities

• Own the complete security layer at ZFH.
• Ensure good compliance with regulated entities.
• Assess and fix existing and new security considerations.
• Work with other Engineers to encourage security as a design paradigm and establish good practices.
• Enable security on the cloud for a modern product.

Skills

Security engineering

Unix basics

Python

Shell scripting

Cloud security

Network security

VAPT tools

OWASP top10

Penetration testing

Team leadership

Job description

At Zerodha Fund House, we are enabling the next generation of Indian investors. We feel mutual fund as a product needs to be re-imagined to build simple & relevant investment solutions for the next 10 crore individuals to participate in and grow the capital markets in India. We are building the founding team and are looking for smart and passionate people to join us.

Looking for experienced folks in the area of information security with a strong understanding of security, network vulnerabilities.

Responsibilities

• Own the complete security layer at ZFH.
• Ensure good compliance, we work with a lot of regulated entities
• Assess and fix existing and new security considerations
• Work with other Engineers to encourage security as a design paradigm and establish good practices
• Enable security on the cloud for a modern product

Requirements

• 3-6 years of relevant experience
• A hacking mentality
• Strong understanding of Unix based systems
• Scripting - Python, shell
• Understanding of cloud architectures and how to secure them
• Understanding of data security on the cloud, in rest and in motion
• Familiarity with web-app security concepts (SQL Injection, XSS, CSRF, RCE, IDOR etc.),OWASP-10
• Strong understanding of networks and security - analysis tools, penetration testing, firewalls, VPCs, VPNs
• Familiarity with security and compliance best practices
• Familiarity with tools for Vulnerability scanners, IDS/IPS, Application Firewall, VAPT
• Interest in building a team

Good to haves

• Interest in finance
• Understanding of Android-app security