Search by job, company or skills

Senior Security Engineer (Remote, Full-Time)

Senior Security Engineer (Remote, Full-Time)

Smart Working
6-8 Years
Not Disclosed
Early Applicant
  • Posted 2 months ago
  • Be among the first 10 applicants

Job Description

About Smart Working



At Smart Working, we believe your job should not only look right on paper but also feel right every day. This isn't just another remote opportunity - it's about finding where you truly belong, no matter where you are. From day one, you're welcomed into a genuine community that values your growth and well-being.


Our mission is simple: to break down geographic barriers and connect skilled professionals with outstanding global teams and products for full-time, long-term roles. We help you discover meaningful work with teams that invest in your success, where you're empowered to grow personally and professionally.
Join one of the highest-rated workplaces on Glassdoor and experience what it means to thrive in a truly remote-first world.


About the Role


As a Senior Security Engineer, you will play a critical role in designing and implementing security controls across mobile applications, backend services, and web platforms. You will help ensure that systems are secure by design, protecting both customer data and platform integrity while meeting strict internal security standards and regulatory requirements.
Working closely with engineering teams, you will contribute to embedding security practices across the development lifecycle, from secure coding and threat modelling to DevSecOps and infrastructure security. You will help identify vulnerabilities, assess risk, and implement proactive security measures that strengthen the organisation's overall security posture.


This role is ideal for a security engineer who enjoys working at the intersection of application security, secure architecture, and engineering enablement, helping development teams build resilient and compliant systems.


Responsibilities

  • Design and implement security controls for mobile applications, backend services, and web platforms

  • Conduct threat modelling and risk assessments for new and existing systems

  • Embed secure coding practices across engineering teams, aligned with OWASP standards

  • Partner with engineers to ensure security is integrated throughout the software development lifecycle (SDLC)

  • Identify and remediate application vulnerabilities and security risks

  • Contribute to the implementation and improvement of DevSecOps practices

  • Provide guidance on secure architecture and secure software design

  • Support the development and enforcement of security policies, controls, and engineering standards

  • Improve the organisation's application security posture through proactive security reviews and testing

  • Work with teams to ensure systems meet internal security standards and external regulatory requirements

  • Provide security expertise for infrastructure components including containers and cloud-native environments

  • Contribute to incident response and vulnerability management processes

Requirements

  • 6+ years of experience in security engineering or application security

  • 3+ years of experience in Application Security (AppSec)

  • 3+ years of experience conducting threat modelling and risk assessments

  • 3+ years of experience applying secure coding principles aligned with OWASP standards

  • Strong understanding of application security vulnerabilities and mitigation strategies

  • Proven experience collaborating with engineering teams to build secure-by-design applications

  • 2-3 years of experience implementing DevSecOps practices

  • 2-3 years of experience securing containerised environments such as Docker or Kubernetes

  • 2+ years of experience applying cryptography and encryption techniques in application security

Nice to Have

  • Experience working within a bank, fintech company, or other regulated environment

  • Familiarity with financial services security standards and regulatory frameworks

  • Experience securing mobile applications and modern web platforms

Benefits

  • Fixed Shifts: 12:00 PM - 9:30 PM IST (Summer) | 1:00 PM - 10:30 PM IST (Winter)

  • No Weekend Work: Real work-life balance, not just words

  • Day 1 Benefits: Laptop and full medical insurance provided

  • Support That Matters:Mentorship, community, and forums where ideas are shared

  • True Belonging: A long-term career where your contributions are valued


We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

More Info

Job Type:
Industry:
Employment Type:

Key Skills

Cryptography and encryption techniques

OWASP standards

Risk assessments

Secure coding principles

Application security vulnerabilities

DevSecOps practices

Threat modelling

About Company

Similar Jobs

8-14 yrs
Hyderabad, India
Skills:
threat modeling , API security, Owasp Top 10, Data protection and privacy concepts, Secure SDLC practices, AI ML security risks, Secure system design, Architecture and design-level security reviews, DevSecOps tooling, Application security principles, Authentication and authorization mechanisms
5-7 yrs
Hyderabad, India
Skills:
policy development , compliance monitoring , Golang, Grc, evidence collection, audit management, risk assessments
5-7 yrs
Hyderabad, India
Skills:
Microservices, dynamic application security testing, Static Application Security Testing, PowerShell, Python, Bash, Vulnerability Management, secure design principles, continuous delivery pipelines, secure software development, monitoring into continuous integration, attack surface management tools, software composition analysis, DevSecOps practices, modern application architectures, security controls testing