Senior Information Security Engineer
Company: Reward360 Global Services Private Limited
Location: Bengaluru, Karnataka, India Experience: 4 to 5 Years in Security Engineering
Department: Information Security
Job Overview
As a Senior Information Security Engineer at Reward360, you will be the technical anchor for our offensive and defensive security programs. You will lead efforts to secure our highly transaction-heavy, enterprise-grade loyalty and rewards platforms utilized by global banks. This senior position shifts focus from basic security execution to architecting secure infrastructures, guiding DevSecOps maturity, and leading threat modeling across our cloud-native applications. You will work closely with engineering leadership to build automated, resilient guardrails that systematically eliminate application and cloud defects before they surface.
Key Responsibilities
- Security Architecture & Design: Design, implement, and audit structural security controls for cloud-native architectures. Provide advanced security blueprints to engineering teams building APIs and microservices.
- Advanced Threat Modeling: Lead architectural threat modeling workshops during early software development lifecycles to detect structural flaws before deployment.
- DevSecOps Integration: Own and mature the CI/CD security pipeline. Build custom tooling, automate SAST/DAST playbooks, and create frictionless loops that allow product engineers to resolve bugs rapidly.
- Vulnerability & Incident Leadership: Direct the remediation strategy for vulnerabilities across corporate web applications, APIs, and microservices. Serve as a technical point of escalation for security incident response operations.
- Cloud Security Posture Management: Continuously assess and harden multi-tenant Amazon Web Services (AWS) environments, establishing rigorous policies for IAM, network zoning, and perimeter firewalls.
- Mentorship & Governance: Mentor junior security engineers and purple team members. Define enterprise security standards and support compliance objectives relevant to global financial operations.
Required Skills & Experience
1. Technical Competency & Architecture
- Deep expertise in application security architecture and enterprise threat modeling patterns (e.g., STRIDE, PASTA).
- Superior understanding of advanced web, application, and cloud vulnerabilities, including the OWASP Top 10 and OWASP API Security Top 10.
- Mastery over cloud security principles, with practical engineering experience hardening AWS cloud services.
2. Tooling, Scripting & Automation
- Prolific capability with Python, Go, or JavaScript to build security scripts, automate operational workflows, and integrate security solutions.
- Hands-on command over enterprise SAST, DAST, SCA, and API testing platforms (e.g, Burp Suite, Caido, Semgrep, OWASP Dependency, Cyclonedx etc).
- Deep configuration knowledge of container security controls
(Kubernetes/Docker hardening) and SIEM/vulnerability scanners
3. Education & Professional Credentials
- Education: Bachelor’s or Master's degree in Computer Science, Cyber Security, or equivalent technical fields.
- Certifications (Highly Valued): CEH/CRTO/CRTP/CPTS