Security Engineer

We have an immediate opening for a Security Engineer in New Delhi. The Cloud Security team is small and hands-on. We need someone who writes code and automation, not just policy. This is a hybrid role. Most of the team is in the New Delhi office Tuesday to Thursday.

Day to day

• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Own secrets management, key rotation and KMS policies
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Write secure coding guidelines and run developer training
• Triage bug bounty reports from HackerOne or Bugcrowd
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub

What we're looking for

• Experience with SIEM, EDR or vulnerability management tools
• Hands-on cloud security experience in AWS, Azure or GCP
• Good judgment on risk: knowing what to fix now and what can wait
• Programming or scripting ability in Python, Go or similar
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

What we offer

• Health insurance for you and your family
• Provident fund
• Paid leave
• Group term life insurance
• Gratuity

The company

Advertising, subscriptions and transaction fees each bring in a significant share of revenue. Traffic during holiday peaks can reach ten times normal levels, and the platform is built for it.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Cliffcast Apps.