SDE 1 Security Engineer

About the Engineering Team Navi’s Engineering team builds the backbone of our financial products. We operate as cross-functional teams that work closely with Product, Data, and Business functions to deliver reliable, high-performance systems at scale. Our engineers focus on solving real-world challenges through scalable architecture, automation, and long-term thinking, along with providing quality feedback - ensuring every Navi product is built to serve millions efficiently and seamlessly.

About the Role We are seeking a proactive and technically curious Security Engineer I to join our product security team. In this role, you will be on the front lines of defending our products, focusing heavily on Vulnerability Assessment and Penetration Testing (VAPT) across our web applications, mobile apps (iOS/Android), and backend APIs. Because we believe in scaling our defenses, a major component of this role involves writing automation to streamline repetitive testing and operational tasks. This is a fantastic opportunity for an early-career engineer who loves breaking things, writing code to build custom security tools, and collaborating with development teams to fix vulnerabilities.

Key Responsibilities

• Application Penetration Testing: Conduct routine VAPT on web applications, REST/GraphQL APIs, and mobile applications (iOS and Android) to identify security flaws before they reach production.
• Security Automation: Design, write, and maintain custom scripts and automation tools (primarily in Python, or another preferred language like Go/Bash) to streamline vulnerability scanning, log parsing, and reporting workflows.
• Vulnerability Triage & Validation: Review alerts from automated security scanners (SAST/DAST), filter out false positives, and manually validate suspected vulnerabilities.
• Developer Collaboration: Work directly with software engineering teams to clearly communicate the impact of identified vulnerabilities and provide actionable remediation guidance based on the OWASP Top 10.
• Tool Maintenance: Assist in integrating, configuring, and tuning open-source and commercial security testing tools within our deployment pipelines.
• Reporting & Documentation: Draft clear, concise penetration testing reports detailing attack vectors, proofs of concept (PoCs), and mitigation strategies.

Required Qualifications

• Experience: 0–2 years of experience in application security, penetration testing, or software
• engineering (including strong internships, bug bounty experience, or intensive cybersecurity programs).
• VAPT Knowledge: Hands-on understanding of the OWASP Top 10 (Web and Mobile) and the
• ability to manually exploit common vulnerabilities (e.g., XSS, SQLi, IDOR, improper API authorization).
• Scripting & Automation: Strong proficiency in Python (or similar languages like Go, Ruby, or Bash).
• You should be comfortable interacting with APIs, automating tool executions, and manipulating data via code.
• Security Tooling: Familiarity with standard penetration testing tools such as Burp Suite, OWASPZAP, Postman, Nmap, or mobile-specific tools like MobSF.●
• Core Fundamentals: Solid understanding of how the web works (HTTP/HTTPS, TCP/IP, DNS), API architectures and basic mobile application structures (APKs/IPAs).

About Navi Navi is on a mission to make finance simple, accessible, and affordable for a billion Indians. Guided by a strong customer-first approach, the company is building tech-first solutions that work at scale. Their offerings include a range of financial products and services across Loans, Insurance, Mutual Funds, Digital Gold, and UPI. Founded by Sachin Bansal & Ankit Agarwal in 2018, Navi is one of India’s fastest-growing financial services organizations.

Our Culture At Navi, ambition meets opportunity, and ideas turn into impact quickly. We empower people with high ownership from the start, encouraging them to solve meaningful problems and build with excellence. Teams work in an environment that values speed, collaboration, and craftsmanship, while celebrating learning, growth, and shared wins. The company is guided by The Navi OS—a set of principles that shape how we work and win together. You can explore them at navi.com/our-values to see what drives them every day. If this feels like you, Navi is the place to grow, thrive and make a real impact.