Senior Security Engineer (Player/Coach)

Fundmore Technologies; Bengaluru; Hybrid; INR 3,000,000 - 5,500,000; Full time

Job summary

FundMore.ai is hiring a Senior Security Engineer (player/coach) to be our senior security technologist. You will read code, challenge architecture and lead the technical response when something goes wrong. Most of the role is hands-on; the rest is raising the security skills of our engineers.

You will work from Bengaluru (hybrid) with incident on-call shared among senior engineering staff and mentor a security champions group to strengthen secure practices across the team.

Qualifications

• 5–8 years in security engineering with a strong cloud security background.
• Expert in TypeScript and secure coding practices.
• Designed or reviewed the security architecture for a multi-tenant SaaS on AWS.
• Led the technical response on real security incidents.

Responsibilities

• Review pull requests and designs for security-relevant changes (authentication, authorization, multi-tenant data isolation, integrations).
• Threat-model new features, APIs and third-party integrations before they ship.
• Assess and harden our AWS environment: identity and access, network segmentation, secrets, encryption and logging.
• Build security into the CI/CD pipeline (static analysis, dependency and secret scanning, IaC checks).
• Build detection and alerting; run or commission penetration tests.
• Act as technical incident lead: triage, containment, root-cause analysis; run tabletop exercises.
• Own secure coding standards, mentor engineers and grow a security champions group.
• Support customer security questionnaires and audits (SOC 2, ISO 27001).

Skills

Threat modeling

Incident response

Mentoring

Security architecture

Secure coding practices

Tools

TypeScript

AWS security

CI/CD security tooling

Job description

About the role:

FundMore.ai builds software for regulated lenders. We are hiring a Senior Security Engineer (player/coach) to be our senior security technologist: you will read code, challenge architecture and lead the technical response when something goes wrong. Most of the role is hands-on; the rest is raising the security skills of our engineers.

Responsibilities:

• Review pull requests and designs for security-relevant changes (authentication, authorization, multi-tenant data isolation, integrations).
• Threat-model new features, APIs and third-party integrations before they ship.
• Assess and harden our AWS environment: identity and access, network segmentation, secrets, encryption and logging.
• Build security into the CI/CD pipeline (static analysis, dependency and secret scanning, IaC checks).
• Build detection and alerting; run or commission penetration tests.
• Act as technical incident lead: triage, containment, root-cause analysis; run tabletop exercises.
• Own secure coding standards, mentor engineers and grow a security champions group.
• Support customer security questionnaires and audits (SOC 2, ISO 27001).

Requirements:

• 5 to 8 years in security engineering with a strong cloud security background.
• Expert in TypeScript; found and fixed serious vulnerabilities through manual code review.
• Designed or reviewed the security architecture of a multi-tenant SaaS platform on AWS.
• Led the technical response on real security incidents.
• Strong threat-modelling, mentoring and communication skills.

Nice to have:

penetration testing, detection engineering, AI/ML security, DLP (Data Loss Prevention), Cyber Supply Chain Risk Management (C‑SCRM), OSFI B-10/B-13, PIPEDA, OSCP/OSWE/GIAC.

Location:

Bengaluru (hybrid). Incident on-call is shared across senior engineering staff.