Application Security Engineer 2

At Zerodha Fund House, we are enabling the next generation of Indian investors. We feel mutual fund as a product needs to be re-imagined to build simple & relevant investment solutions for the next 10 crore individuals to participate in and grow the capital markets in India. We are building the founding team and are looking for smart and passionate people to join us.

Looking for experienced folks in the area of information security with a strong understanding of security, network vulnerabilities.

Responsibilities

• Own the complete security layer at ZFH.
• Ensure good compliance, we work with a lot of regulated entities
• Assess and fix existing and new security considerations
• Work with other Engineers to encourage security as a design paradigm and establish good practices
• Enable security on the cloud for a modern product
  
  

Requirements

• 3-6 years of relevant experience
• A hacking mentality
• Strong understanding of Unix based systems
• Scripting - Python, shell
• Understanding of cloud architectures and how to secure them
• Understanding of data security on the cloud, in rest and in motion
• Familiarity with web-app security concepts (SQL Injection, XSS, CSRF, RCE, IDOR etc.),OWASP-10
• Strong understanding of networks and security - analysis tools, penetration testing, firewalls, VPCs, VPNs
• Familiarity with security and compliance best practices
• Familiarity with tools for Vulnerability scanners, IDS/IPS, Application Firewall, VAPT
• Interest in building a team
  
  

Good to haves

• Interest in finance
• Understanding of Android-app security