Senior Information Security Engineer

Job Summary

Senior Information Security Engineer

Company: Reward360 Global Services Private Limited

Location: Bengaluru, Karnataka, India

Experience: 4 to 5 Years in Security Engineering

Department: Information Security

As a Senior Information Security Engineer at Reward360, you will be the technical anchor for our offensive and defensive security programs. You will lead efforts to secure our highly transaction-heavy, enterprise-grade loyalty and rewards platforms utilized by global banks. This senior position shifts focus from basic security execution to architecting secure infrastructures, guiding DevSecOps maturity, and leading threat modeling across our cloud-native applications. You will work closely with engineering leadership to build automated, resilient guardrails that systematically eliminate application and cloud defects before they surface.

Responsibilities

• Security Architecture Design: Design, implement, and audit structural security controls for cloud-native architectures. Provide advanced security blueprints to engineering teams building APIs and microservices.
• Advanced Threat Modeling: Lead architectural threat modeling workshops during early software development lifecycles to detect structural flaws before deployment.
• DevSecOps Integration: Own and mature the CI/CD security pipeline. Build custom tooling, automate SAST/DAST playbooks, and create frictionless loops that allow product engineers to resolve bugs rapidly.
• Vulnerability Incident Leadership: Direct the remediation strategy for vulnerabilities across corporate web applications, APIs, and microservices. Serve as a technical point of escalation for security incident response operations.
• Cloud Security Posture Management: Continuously assess and harden multi-tenant AWS environments, establishing rigorous policies for IAM, network zoning, and perimeter firewalls.
• Mentorship Governance: Mentor junior security engineers and purple team members. Define enterprise security standards and support compliance objectives relevant to global financial operations.

Required Skills and Experience

Technical Competency Architecture

• Deep expertise in application security architecture and enterprise threat modeling patterns (e.g., STRIDE, PASTA).
• Superior understanding of advanced web, application, and cloud vulnerabilities, including the OWASP Top 10 and OWASP API Security Top 10.
• Mastery over cloud security principles, with practical engineering experience hardening AWS cloud services.

Tooling, Scripting Automation

• Prolific capability with Python, Go, or JavaScript to build security scripts, automate operational workflows, and integrate security solutions.
• Hands-on command over enterprise SAST, DAST, SCA, and API testing platforms (e.g, Burp Suite, Caido, Semgrep, OWASP Dependency, Cyclonedx etc).
• Deep configuration knowledge of container security controls (Kubernetes/Docker hardening) and SIEM/vulnerability scanners.

Education and Professional Credentials

• Education: Bachelor's or Master's degree in Computer Science, Cyber Security, or equivalent technical fields.
• Certifications (Highly Valued): CEH/CRTO/CRTP/CPTS

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.