Security Engineer

the versatile club

India

3-5 Years

Save

Posted 16 hours ago
Be among the first 10 applicants

Early Applicant

Job Description

What You'll Do

Conduct VAPT (Vulnerability Assessment & Penetration Testing) across web applications, mobile apps, and APIs — end-to-end, with clear findings and actionable recommendations.
Perform secure code reviews across Go, Python, Java, and Node.js codebases to identify security issues before they reach production — not just relying on scanners.
Integrate and tune SAST, DAST, dependency scanning, and other security tooling into CI/CD pipelines to automate vulnerability detection at scale.
Identify and remediate cloud security misconfigurations — particularly in AWS — covering IAM policies, networking, storage, and service configurations.
Build and improve security automation, signal aggregation pipelines, and internal tooling that reduce manual toil for the security team.
Respond to security incidents: triage, investigate, contain, and help build resilience to prevent recurrence.
Partner with engineering teams to embed security into product development workflows — be a resource, not a gatekeeper.
Stay ahead of emerging threats, vulnerability disclosures, and attack techniques relevant to company's stack and operating environment.

Core Skills

Hands-on experience with VAPT — web, mobile, and API security — with the ability to go beyond tooling and think like an attacker.
Ability to read and review code in one or more of: Golang, Python, Java, Node.js — finding security issues through manual review, not just automated scans.
Solid understanding of cloud security fundamentals, especially AWS: IAM, VPC, S3, security groups, and common misconfigurations.
Familiarity with application security concepts: OWASP Top 10, authentication/authorization flaws, injection vulnerabilities, insecure deserialization, etc.
Experience with CI/CD pipelines and integrating security tooling (SAST, DAST, SCA) into developer workflows.
3–5 years of experience in a security engineering, AppSec, or product security role at a product-first company.
B.Tech / M.Tech in Computer Science or equivalent.

How You Work

You are curious and proactive — you dig into problems, not wait for them to escalate.
You balance security best practices with real-world product and business constraints — you understand what good enough for now means without losing sight of the right direction.
You communicate clearly with engineers and non-engineers alike — you can explain a SQL injection in a pull request comment or in a leadership review.

BONUS POINTS

Participation in CTFs (Capture the Flag), bug bounty programs, or published security research.
Experience with container security or Kubernetes environments.
Exposure to threat modeling, security design reviews, or red-teaming exercises.
Familiarity with mobile security (iOS/Android) in addition to web/API.

Skills: owasp,bug bounty,aws,secure code review,appsec / application security,vapt

More Info

Job Type:

Industry:

Function:

Employment Type:

About Company

the versatile clubJob Source: www.linkedin.com

Job ID: 147201581

Jobs by Skill - IT

Jobs by Skill - Non IT

International Jobs

Last Updated: 12-05-2026 00:42:42 AM

Homejobs in IndiaSecurity Engineer

Similar Jobs

Application Security Engineer

Mercedes-Benz Research and Development India

4-6 yrs

Bengaluru, India

Skills:

DevSecOps, Application Security, PowerShell, Bash, Coverity, Python, Azure Cloud Security, Polaris, Wiz, BlackDuck, Jfrog Xray

Security Engineer (Sentinel / SIEM)

Jobgether

6-8 yrs

India

Skills:

Log Management, Azure, AWS, SIEM platforms, Normalization, data ingestion, Microsoft Sentinel, security event correlation

Security Engineer

recrew ai

7-9 yrs

Bengaluru, India

Skills:

S3, Gdpr, RDS, Database Security, Dlp, Dynamodb, Iam, Python, AWS, Go, DSPM, PCI-DSS, Aurora, RBI Cybersecurity Master Directions, privacy engineering, CASB, DPDP

Security Engineer

lg ad solutions

5-7 yrs

Bengaluru, India

Skills:

DAST, Linux, Siem, AWS, EDR, SAST, nist, SOC 2, MDR, CIS

.NET, Java, DAST, Jenkins, Rest Apis, Python, OpenID Connect, CWE Top 25, DevSecOps practices, application API and microservices security, OAuth 2.0, SCA, OWASP Top 10 Web API and LLM Applications, secret scanning tools, SAST, CI CD pipelines, Git-based workflows