Security Engineer

At Upswing, we are committed to building a robust, scalable & secure API platform to power the world of Open Finance.We are a passionate and self-driven team of thinkers who aspire to build the rails to connect the legacy financial sector with financial innovators through a simple and powerful banking-as-a-service (BaaS) platform.We are looking for motivated engineers who will be working in a highly creative and cutting-edge technology environment to build a world-class financial services suite. About the roleAs part of the DevSecOps team at Upswing, you will get to work on building state-of-the-art infrastructure for the future. You will also be –Managing security aspects of the Cloud Infrastructure Designing and Implementing Security measures, Incident Response guidelines Conducting Security Awareness TrainingDeveloping SIEM tooling and pipelines end to end for vulnerability/security/incident reporting Developing automation and performing routine VAPT for Network and ApplicationsIntegrating with 3rd party vendors for the services required to improve security posture Mentoring people across the teams to enable best practices What will you do if you join us?Engage in a lot of cross-team collaboration to independently drive forward DevSecOps practices across the org Take Ownership of existing, ongoing, and future DevSecOps initiatives Plan and Engage in Architecture discussions to bring in different angles (especially security angles) to the tableBuild Automation stack and tools for security pipeline Integrate different security measures and pipelines with the SIEM toolConducting routine VAPT using manual and automated workflows, generating and maintaining the report for the sameIntroduce and Implement best practices across teams for a great security posture in the org You should haveCuriosity for on-the-job learning and experimenting with new technologies and ideasA strong background in Linux environmentProven experience in Architecting networks with security first implementationExperience with VAPT tooling for Networks and Applications is required Strong experience in Cloud technologies, multi-cloud environments, and best practices in Cloud Experience with at least one scripting language (Ruby/Python/Groovy)Experience in Terraform is highly desirable but not mandatorySome experience with Kubernetes, and Docker is required Understanding Java web applications and monitoring them for security vulnerabilities would be a plus Any other DevSecOps-related experience will be considered