Senior Security Engineer

EduRankAI; Kolkata District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

EduRankAI is seeking an AppSec & InfraSec engineer to own application and infra security. You will report to the Principal Security Engineer and read diffs, run scans, threat-model new features, and write code to fix findings.

You will perform code reviews for security on changes, run and tune SAST/DAST/dependency scans, and pen-test new features before release. You will own GDPR/DPDPA controls and respond to security incidents jointly with the Principal.

Qualifications

• Experience securing web applications and infra.
• Knowledge of encryption, key management and crypto basics.
• Ability to model threats and risks for complex features.
• Proficient in secure coding practices and reviewing code for security flaws.
• Familiarity with GDPR/DPDPA controls is a plus.

Responsibilities

• Review code for security in every meaningful change.
• Run SAST/DAST and dependency scans; tune signals to reduce noise.
• Penetration test new features before release.
• Own GDPR/DPDPA technical controls.
• Respond to security incidents with the Principal Security Engineer.
• Write secure-by-default templates and guardrails.

Skills

OWASP Top 10

Cloud security

Cryptography

Threat modelling

Secure coding

Tools

SAST/DAST tools

Job description

AppSec & InfraSec

Day-to-day owner of application + infra security. You will report to the Principal Security Engineer and you will be the engineer who reads the diffs, runs the scans, threat-models the new features, and writes code to fix what they find.

Responsibilities

• Code review for security on every meaningful change.
• Run SAST / DAST / dependency scans; tune them so the signal is real.
• Penetration test new features before release.
• Own GDPR / DPDPA technical controls.
• Respond to security incidents alongside the Principal.
• Author secure-by-default templates and guardrails.

Skills

• Application security — OWASP Top 10 mastery
• Cloud security (AWS / GCP / Vercel)
• Cryptography fundamentals
• Threat modelling
• Comfort writing code to fix what they find