Senior Information Security Engineer

R360 Group; Bengaluru; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Reward360 Global Services Private Limited in Bengaluru, Karnataka, is seeking a Senior Information Security Engineer to architect secure, cloud-native systems and guide DevSecOps maturity for our enterprise loyalty platforms.

You will lead threat modeling, design advanced security controls, and drive remediation across web apps, APIs, and microservices while mentoring junior engineers and aligning with global compliance for financial operations.

Qualifications

• Deep expertise in application security architecture and threat modeling patterns.
• Strong knowledge of OWASP Top 10 and OWASP API Security Top 10.
• Hands-on AWS cloud security with multi-tenant environments.
• Experience with SAST/DAST/SCA and API testing tools.
• Experience with container security controls and Kubernetes/Docker hardening.
• SIEM and vulnerability scanners familiarity.
• Bachelor's or Master's in CS, Cyber Security, or related fields.
• Certifications (Highly valued): CEH/CRTO/CRTP/CPTS.

Responsibilities

• Design, implement, and audit security controls for cloud-native architectures.
• Lead architectural threat modeling workshops early in SDLC.
• Own and mature the CI/CD security pipeline; build tooling, automate SAST/DAST.
• Direct remediation strategy for vulnerabilities across apps and APIs.
• Manage cloud security posture in AWS with IAM, network zoning, and firewalls.
• Mentor junior security engineers and align with global compliance.

Skills

Application security architecture

Threat modeling patterns

OWASP Top 10

AWS cloud security

SAST/DAST tooling

Container security

Kubernetes/Docker hardening

SIEM & vulnerability scanners

Education

Bachelor's or Master's in Computer Science or Cyber Security

Tools

Burp Suite

Caido

Semgrep

OWASP Dependency-Check

Cyclonedx

Job description

Company: Reward360 Global Services Private Limited

Location: Bengaluru, Karnataka, India Experience: 4 to 5 Years in Security Engineering

Department: Information Security

Job Overview

As a Senior Information Security Engineer at Reward360, you will be the technical anchor for our offensive and defensive security programs. You will lead efforts to secure our highly transaction-heavy, enterprise-grade loyalty and rewards platforms utilized by global banks. This senior position shifts focus from basic security execution to architecting secure infrastructures, guiding DevSecOps maturity, and leading threat modeling across our cloud-native applications. You will work closely with engineering leadership to build automated, resilient guardrails that systematically eliminate application and cloud defects before they surface.

Key Responsibilities

• Security Architecture & Design: Design, implement, and audit structural security controls for cloud-native architectures. Provide advanced security blueprints to engineering teams building APIs and microservices.
• Advanced Threat Modeling: Lead architectural threat modeling workshops during early software development lifecycles to detect structural flaws before deployment.
• DevSecOps Integration: Own and mature the CI/CD security pipeline. Build custom tooling, automate SAST/DAST playbooks, and create frictionless loops that allow product engineers to resolve bugs rapidly.
• Vulnerability & Incident Leadership: Direct the remediation strategy for vulnerabilities across corporate web applications, APIs, and microservices. Serve as a technical point of escalation for security incident response operations.
• Cloud Security Posture Management: Continuously assess and harden multi-tenant Amazon Web Services (AWS) environments, establishing rigorous policies for IAM, network zoning, and perimeter firewalls.
• Mentorship & Governance: Mentor junior security engineers and purple team members. Define enterprise security standards and support compliance objectives relevant to global financial operations.

Required Skills & Experience

1. Technical Competency & Architecture

• Deep expertise in application security architecture and enterprise threat modeling patterns (e.g., STRIDE, PASTA).
• Superior understanding of advanced web, application, and cloud vulnerabilities, including the OWASP Top 10 and OWASP API Security Top 10.
• Mastery over cloud security principles, with practical engineering experience hardening AWS cloud services.

2. Tooling, Scripting & Automation

• Hands-on command over enterprise SAST, DAST, SCA, and API testing platforms (e, g, Burp Suite, Caido, Semgrep, OWASP Dependency, Cyclonedx etc).
• Deep configuration knowledge of container security controls

(Kubernetes/Docker hardening) and SIEM/vulnerability scanners

3. Education & Professional Credentials

• Education: Bachelor’s or Master's degree in Computer Science, Cyber Security, or equivalent technical fields.
• Certifications (Highly Valued): CEH/CRTO/CRTP/CPTS