Security Engineer

You are joining a global bank's India technology centre as the lead for its application security team. Your mission is critical: establish robust guardrails before teams expand so that standards govern several hundred engineers for years, preventing incidents rather than reacting to them.

Key Responsibilities:

• Threat Modelling: Integrate security early into service design. Be present during architecture discussions to ensure designs change safely and securely from the outset.
• Code & Infrastructure Review: Audit codebases for failure classes that cause real incidents, moving beyond generic checklists.
• Pipeline Security: Embed scanning and secrets detection directly into CI/CD pipelines so findings are detected at commit time, not weeks later.

The Challenge: Making Secure the Easy Path

Your role extends beyond enforcement to product design. Engineers often route around security gates if they perceive them as slower than manual workarounds. You must engineer standards that are frictionless, ensuring compliance is adopted naturally rather than ignored until an audit reveals it.

Requirements:

• Experience: 4 to 8 years in application or product security (Financial Services experience preferred).
• Coding Proficiency: Ability to read and write code securely (Java, Python, or Go required).
• Cloud Security: Working knowledge of cloud security controls and identity models.