Tech Lead - Security Engineering

Vegapay; Bengaluru; On-site; INR 2,500,000 - 3,500,000; Full time

Job summary

A leading fintech firm in Bengaluru is looking for a Lead Engineer to drive its security posture. The role involves owning security architecture, managing compliance with global standards, and implementing robust systems for threat detection. Ideal candidates will have significant experience in security tooling and AWS security, alongside strong proficiency in scripting. You will work in a dynamic environment, ensuring security within a highly regulated fintech sector.

Qualifications

• Strong experience with security tooling across SIEM, DevSecOps, cloud security, and vulnerability management.
• Hands-on expertise with AWS security ecosystem, IAM hardening, and infrastructure security.
• Proficiency in scripting (Python, Bash) and securing IaC (Terraform, Ansible).

Responsibilities

• Own and strengthen identity, access, and endpoint security across the organization.
• Lead infrastructure and application security, including vulnerability assessments and pentesting.
• Design and scale security automation, including SIEM and incident response playbooks.

Skills

Security tooling

AWS security

Scripting (Python, Bash)

Compliance management

Stakeholder management

Education

Security certifications (CISSP, OSCP, CISA, CEH, CCSP)

Job description

The Impact You’ll Drive

We’re looking for a Lead Engineer to own and scale Vegapay’s end-to-end security posture across infrastructure, applications, and DevOps pipelines. You will lead security strategy, drive compliance across global standards, and build robust systems to proactively detect, prevent, and respond to threats in a highly regulated fintech environment.

The Hats You Will Wear

• Own and strengthen identity, access, and endpoint security across the organization (SSO, MFA, RBAC, least privilege, device controls).
• Lead infrastructure and application security, including vulnerability assessments, penetration testing, secure coding practices, and DevSecOps integration across CI/CD pipelines.
• Build and operate real-time threat detection and response systems across cloud and endpoints, ensuring robust monitoring, alerting, and data protection standards.
• Design and scale security automation, including SIEM, incident response playbooks, and integrated alerting workflows across systems.
• Drive end-to-end compliance across PCI DSS, ISO 27001, SOC 2, and CICRA, including audit readiness, risk management, and continuous compliance monitoring.
• Lead security awareness initiatives, including phishing simulations and strengthening defenses against social engineering threats.

The Perfect Fit

• Strong experience with security tooling across SIEM, DevSecOps, cloud security, and vulnerability management.
• Hands‑on expertise with AWS security ecosystem, IAM hardening, and infrastructure security.
• Proficiency in scripting (Python, Bash) and securing IaC (Terraform, Ansible).
• Deep understanding of modern security frameworks and threat models (OWASP, MITRE ATT&CK, CIS).
• Proven experience managing compliance for global security standards.
• Ability to balance hands‑on execution with strategic ownership.

Your Edge Over The Rest

• Certifications like CISSP, OSCP, CISA, CEH, or CCSP.
• Experience in FinTech, SaaS, or regulated environments.
• Strong stakeholder management and cross‑functional collaboration skills.

The Problem We’re Solving

Financial institutions today are held back by legacy systems that are slow, rigid, and expensive to scale. Launching or evolving credit, lending, and UPI products often takes months, requires heavy engineering effort, and limits the ability to create personalized customer experiences.

At the same time, customer expectations have changed — speed, flexibility, and tailored financial products are no longer optional. Banks and fintechs need infrastructure that allows them to innovate quickly, adapt continuously, and scale without friction.

This is where we come in. At Vegapay, we are building modern, configurable fintech infrastructure that enables banks, NBFCs, and enterprises to design, launch, and manage credit and payment programs with ease. Our platform brings together flexibility, speed, and control — helping our partners unlock new growth opportunities and deliver personalized banking experiences at scale.

The Opportunity Ahead

• Play a pivotal role in defining Vegapay’s security architecture and practices as we build a category‑defining fintech infrastructure company.
• Own security at a strategic level.
• Operate at the intersection of scale and regulation.
• Build and influence high‑performing teams.
• High ownership, high accountability environment.