Product Security Engineer II

Zeta; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Zeta, a leading banking technology company, seeks a Product Security Engineer to secure its mobile, web applications, and APIs. You will work within the Risk & Compliance Team, engineering division, as an individual contributor reporting to a manager.

You will perform VA/PT, guide developers, participate in design discussions, and implement secure coding standards across projects to strengthen Zeta's platforms.

Qualifications

• Proven experience in application security engineering for web and mobile apps.
• Ability to guide developers on secure coding and fix security issues.
• Experience with security testing tools and secure design discussions.

Responsibilities

• Perform regular VA/PT for Web and Mobile applications, APIs and infrastructure.
• Guide developers in fixing security issues and conduct code reviews.
• Involve in application design discussions and perform threat modelling.

Skills

Web security

Mobile security

Threat modelling

Code reviews

DevSecOps

Tools

SAST

DAST

SCA

CI/CD tooling

Job description

About us:

Build the future of banking.

Zeta is a next-generation banking technology company providing cloud-native, fully stackable processing and core banking platforms for issuers. With a focus on scalability, compliance, and innovation, Zeta empowers financial institutions to modernize their technology infrastructure and deliver secure, seamless digital banking experiences.

Our impact runs at real-world scale. Today, over 25 million cards are live on Zeta-powered platforms across 7 countries, supported by a passionate team of 1,700+ Zetanauts across India, the US, EMEA, and Asia. Backed by SoftBank Vision Fund, Mastercard, and other reputed strategic investors, we reached a valuation of $2 billion in 2025.

Our focus is on establishing product lines that focus on key outcomes by addressing real customer pain points, modernizing legacy systems, and strengthening core fundamentals. As a result, our systems and platforms support a wide range of banking and payments capabilities, including:

• 1. Tachyon, our cloud-native banking stack built for population-scale systems
• 2. Cipher, our unified authentication platform for secure, high-volume banking environments
• 3. Digital Credit as a Service, enabling banks to launch credit lines on UPI
• 4. Elena, our intelligent and conversational AI platform for banking
• 5. Pixel, India’s first digital-native credit card, launched in partnership with HDFC Bank, for whom we also revamped their PayZapp mobile app: Winner of the Celent Model Bank Award for Payments Innovation 2024
• 6. Sparrow, the leading card experience for non-prime cardholders in the US

...and more across cards, payments, lending, and core banking.

We are an engineering-first organization that values ownership, bias for action, and long-term thinking. Together, we solve some of the hardest problems in banking tech. Our culture is built around trust, collaboration, and creating the conditions for you to drive impact proportionate to your potential. Reinforcing our commitment to creating an inclusive and supportive workplace, we have been consistently recognized as a Great Place to Work.

If you want to build cutting-edge banking tech that enables banks to serve millions reliably, securely, and at a population scale, Zeta is your playground.

If you would like to learn more about how we have grown and evolved over the years, watch our journey here. You can also explore our website and follow us on LinkedIn, Instagram, YouTube, and X.

About the Role:

This role is part of the Risk & Compliance Team, Engineering division of Zeta. The Product Security Engineer is responsible to secure all mobile & web applications along with API’s by breaking and hacking them and educating Developers as well as DevOps teams on how to fix them. The objective is to make zeta applications and platforms secure. As Application Security Engineer of the Product Security sub-division, you will be responsible for securing all the Zeta’s Products. You will be working as an individual contributor reporting to a manager.

• Perform regular VA/PT for Web & Mobile applications, API & Infrastructure
• Guide developers in fixing security issues
• Regular code reviews
• Involve in application design discussions
• Perform Threat Modelling of Web/Mobile applications
• Develop secure code practices and educate devand QA engineers by building security standards, policies for secure coding, secure data handling, secure networking, secure crypto implementation, etc.
• Evaluate & Integrate security testing tools (SAST,DAST,SCA)in toCI/CD pipelines