Junior Security Engineer

Location: BANGALORE, India

Department: Decentro- Engineering

Experience: 2–3 years

• Test APIs and web applications for security vulnerabilities, validate findings, and collaborate with developers on remediation.
• Monitor security alerts and logs, investigate suspicious activity, and support incident response and root-cause analysis.
• Help secure AWS environments through IAM reviews, configuration checks, network controls, encryption, and secrets management.
• Run vulnerability scans, prioritise findings based on risk, and track remediation through closure.
• Own security patch tracking across servers, operating systems, containers, application dependencies, and security tooling.
• Coordinate deployment with engineering and infrastructure teams, validate fixes, and track patch compliance and exceptions.
• Support security reviews of new features and integrations, focusing on authentication, authorisation, and sensitive-data handling.
• Integrate security checks into development workflows, including dependency scanning, static analysis, and secret detection.
• Write scripts to automate repetitive security checks and improve monitoring.
• Maintain security documentation, incident playbooks, and evidence for audits and assessments.

• 2–3 years of total professional experience, including hands-on experience in security engineering, application security, cloud security, SOC, or VAPT.
• Practical understanding of common application and API vulnerabilities, including broken access controls, injection, authentication flaws, and security misconfigurations.
• Familiarity with Burp Suite, OWASP ZAP, Nmap, or equivalent security-testing tools.
• Working knowledge of Linux, networking, HTTP/TLS, and cloud security fundamentals.
• Experience investigating security findings and documenting their impact, reproduction steps, and recommended fixes.
• Basic scripting skills in Python, Bash, or a similar language.
• An ownership mindset, attention to detail, and the ability to collaborate effectively with developers.
• Exposure to AWS security services, SIEM tools, endpoint security, or container security is good to have.
• Experience with CI/CD security tooling, SAST, DAST, or software composition analysis is good to have.
• Familiarity with fintech or payments environments and frameworks such as ISO 27001, SOC 2, or PCI DSS is an added advantage.
• Relevant certifications, responsible disclosures, bug bounty findings, or security projects demonstrating practical skills are an added advantage.
• Prior professional, hands-on security experience is mandatory. Certifications or coursework alone will not meet this requirement.

• The ability to make an impact and lay the foundation for upcoming fintech innovations. A multicultural and diverse team with colleagues from different states and global backgrounds.
• Progressive and flexible work hours that match your personality and lifestyle. Best-in-class perks and benefits.
• Check out our careers page for the same: https://decentro.tech/careers/ Backed by global investors such as Y Combinator & Rapyd, we're a contrarian and progressive culture of independent thinkers and systematic executors driven to build cool things that matter.