Security · Hyderabad (hybrid) · Full-time
Security Engineer
Protect customers' invoices, contracts and trade data. Working with Nandini Rao, Head of Security & Compliance, you will own cloud security, tenant isolation testing and the controls behind our SOC 2 Type II report, with zero sharing, reselling or model training on customer data as a hard rule.
What you'll do
- Harden and monitor our AWS environment in us-east-1 and us-west-2: IAM, network boundaries, key management and logging.
- Test and document tenant isolation, encryption at rest (AES-256) and in transit (TLS 1.3) across services and data stores.
- Run vulnerability management, dependency scanning and third-party penetration test remediation.
- Maintain SOC 2 Type II controls and evidence, and answer customer security questionnaires with engineering-level accuracy.
- Own SSO (SAML), MFA and role-based access design with the product team, and lead incident response exercises.
What you bring
- 4+ years in security engineering or cloud infrastructure with a security focus, ideally in a multi-tenant SaaS company.
- Deep AWS security knowledge and experience with infrastructure as code.
- Experience operating controls for SOC 2 or ISO 27001 audits.
- Ability to write code (Python, Go or TypeScript) for automation and tooling.
Nice to have
- AWS security or OSCP-level certifications.
- Experience with data protection requirements for US enterprise customers.
- Background in detection engineering or SIEM tuning.