Graduate Security Engineer (Product Security)

Every report is written by the person who did the testing, not a separate writing team. Shrike Cyber is a small team of former military and law enforcement analysts doing pen tests and incident response.

This is a new position created as the team has grown over the last year. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. Remote within India. The team meets in Pune once a quarter, travel covered. Hours are flexible, with one short team call each morning. You will need a stable internet connection and a backup power source (UPS or inverter).

Duties

• Assess third-party vendors and SaaS integrations for security risk
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Automate security checks in CI/CD pipelines

Who you are

• 1-2 years in security engineering, application security or a related engineering role
• Good judgment on risk: knowing what to fix now and what can wait
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Programming or scripting ability in Python, Go or similar
• Ability to explain security issues to engineers without lecturing them

Benefits

Compensation: ₹8,00,000 - ₹9,50,000 per annum

• Health insurance for you and your family
• Provident fund
• Paid leave
• Gratuity
• Learning budget
• Internet reimbursement

We may close this posting early once we have enough applications.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Shrike Cyber Pvt Ltd.