Senior Engineer - Application and Platform Security (India)

Lead security design reviews and threat modeling for product features focusing on authentication, authorization, data isolation, and financial workflows.

Perform manual code reviews and security testing of web applications and APIs to find authorization and business logic vulnerabilities, and drive remediations.

Develop secure defaults including libraries, static analysis rules, and automation to prevent vulnerabilities across application code, deployment systems, and cloud infrastructure.

5+ years experience in application or product security, or software engineering with strong security focus.

Strong programming skills in Python and working proficiency in JavaScript/TypeScript for client-side code review.

In-depth knowledge and hands-on experience with OAuth 2.0/OIDC, SAML, MFA, session management, and access control models.

Experience leading threat modeling sessions and performing manual code reviews to find authorization and business logic flaws.

Experienced in manual security code reviews with ability to find complex authorization and business logic flaws beyond automated tools.

Comfortable coding production-level security tools and controls, not just scripts, across multiple languages.

Working knowledge of cloud, container, CI/CD security, and AI/LLM application security risks to design comprehensive application security solutions.