BENGALURU · FULLTIME
Sr Application Security Engineer
Zerodha
Bengaluru · onsite · Posted 44d ago
Sourced from
Undisclosed6–9 yrsfulltimeBengaluru
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.6s
- Found the form on Naukri · 13 questions to answer1.2s
- Decided the answers for all of them2.5s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
At Zerodha Fund House, we are enabling the next generation of Indian investors. We think the mutual fund needs to be re-imagined as a product: simple, transparent, and relevant enough to bring the next 10 crore Indians into the capital markets. We are building the founding team and are looking for smart, passionate people to join us.
We are looking for a Senior Security Engineer to own security at ZFH. This is a foundational role. You will be the person who defines what security means here, sets the standards the rest of engineering builds against, and grows the function (and eventually the team) as we scale.
Responsibilities
- Own the complete security layer at ZFH
- Own application security across our web and mobile products, from threat modelling at design time through code review, CI scanning with sane triage thresholds, and driving pentest and bug bounty findings through to verified fixes
- Own AWS security end to end: multi-account and multi-region guardrails, least-privilege IAM, segmented networks, encryption and key management, all codified in Terraform
- Build detection and response that people act on: GuardDuty, CloudTrail, Config, Security Hub, WAF, and centralised logging wired to alerts someone actually reads
- Handle compliance: SEBI cybersecurity framework, CERT-In reporting, system audits, partner security reviews
- Own incident response, playbooks, and escalation
- Work with engineers so security is built in early, not bolted on late
- Hire and grow the security team over time
Requirements
- 6-9 years in security, with depth in cloud and app security
- Hands-on AWS security. You can spot what is wrong with an IAM policy or a VPC
- A hacking mindset, and the judgement to tell a real risk from a noisy scanner finding
- Strong Unix, plus Python and shell scripting
- Web app security fundamentals: SQLi, XSS, CSRF, SSRF, IDOR, auth flaws, OWASP Top 10
- Networking and network security: firewalls, VPNs, TLS, traffic analysis, pentesting
- Experience with vulnerability scanners, IDS/IPS, WAFs, VAPT engagements
- Working knowledge of data security: classification, encryption, key management, and access control for data at rest and in motion
- Interest in building a team
Nice to have
- BFSI or fintech experience
- CTF background. Tell us your team, your handle, and anything you are proud of
- Android and mobile app security
- Interest in markets
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
Code Reviewapp securityaws iamfirewallsIncident Responseamazon web servicesipsencryptionclassificationauditsmobile appbfsiCapital MarketsAndroidFintechcloudAws SecurityCyber SecurityApplication SecurityData Securitycompliance
Section · Company
About Zerodha
Zerodha
FinTech
1.1k+
employees
2010
16 years old
Bangalore / Bengaluru, Karnataka
India
₹14.3L PA avg
Avg at Zerodha
About
Zerodha is India's biggest stock broker offering the lowest, cheapest brokerage rates for futures and options, commodity trading, equity, and mutual funds
Industries
FinTechInternet
Employee ratings
10 reviews
4.3/ 5
Culture
3.7
Career growth
2.9
Work-life
3.4
Employees rate it well for
Overall Company43Work-Life Balance41
Find them on