About Smart Working

At Smart Working, we believe your job should not only look right on paper but also feel right every day. This isn't just another remote opportunity - it's about finding where you truly belong, no matter where you are. From day one, you're welcomed into a genuine community that values your growth and well-being.

Our mission is simple: to break down geographic barriers and connect skilled professionals with outstanding global teams and products for full-time, long-term roles. We help you discover meaningful work with teams that invest in your success, where you're empowered to grow personally and professionally.
Join one of the highest-rated workplaces on Glassdoor and experience what it means to thrive in a truly remote-first world.

About the Role

As a Senior Security Engineer, you will play a critical role in designing and implementing security controls across mobile applications, backend services, and web platforms. You will help ensure that systems are secure by design, protecting both customer data and platform integrity while meeting strict internal security standards and regulatory requirements.
Working closely with engineering teams, you will contribute to embedding security practices across the development lifecycle, from secure coding and threat modelling to DevSecOps and infrastructure security. You will help identify vulnerabilities, assess risk, and implement proactive security measures that strengthen the organisation's overall security posture.

This role is ideal for a security engineer who enjoys working at the intersection of application security, secure architecture, and engineering enablement, helping development teams build resilient and compliant systems.

Responsibilities

Design and implement security controls for mobile applications, backend services, and web platforms

Conduct threat modelling and risk assessments for new and existing systems

Embed secure coding practices across engineering teams, aligned with OWASP standards

Partner with engineers to ensure security is integrated throughout the software development lifecycle (SDLC)

Identify and remediate application vulnerabilities and security risks

Contribute to the implementation and improvement of DevSecOps practices

Provide guidance on secure architecture and secure software design

Support the development and enforcement of security policies, controls, and engineering standards

Improve the organisation's application security posture through proactive security reviews and testing

Work with teams to ensure systems meet internal security standards and external regulatory requirements

Provide security expertise for infrastructure components including containers and cloud-native environments

Contribute to incident response and vulnerability management processes

Requirements

6+ years of experience in security engineering or application security

3+ years of experience in Application Security (AppSec)

3+ years of experience conducting threat modelling and risk assessments

3+ years of experience applying secure coding principles aligned with OWASP standards

Strong understanding of application security vulnerabilities and mitigation strategies

Proven experience collaborating with engineering teams to build secure-by-design applications

2-3 years of experience implementing DevSecOps practices

2-3 years of experience securing containerised environments such as Docker or Kubernetes

2+ years of experience applying cryptography and encryption techniques in application security

Nice to Have

Experience working within a bank, fintech company, or other regulated environment

Familiarity with financial services security standards and regulatory frameworks

Experience securing mobile applications and modern web platforms

Benefits

Fixed Shifts: 12:00 PM - 9:30 PM IST (Summer) | 1:00 PM - 10:30 PM IST (Winter)

No Weekend Work: Real work-life balance, not just words

Day 1 Benefits: Laptop and full medical insurance provided

Support That Matters:Mentorship, community, and forums where ideas are shared

True Belonging: A long-term career where your contributions are valued

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Senior Security Engineer (Remote, Full-Time)