Upstox

Software Development Engineer II - Application Security

Security Engineer II - Cyber Defence

Sr. Product Designer

Software Development Engineer - III (Frontend-AJ)

Software Development Engineer - III (Backend-AJ)

<div class="section page-centered" data-qa="job-description"><div><a style="font-size: 11.5pt;" href="https://upstox.com/">Upstox </a><span style="font-size: 12pt;">i</span><span style="font-size: 11.5pt;">s one of India's leading Fin-Tech companies with a mission to simplify trading &amp; investing to make it easily accessible to the masses. From new investors to seasoned traders, we aim to enable everyone to invest across multiple categories with our state-of-the-art trade &amp; investment platform and commission-free pricing. We offer numerous asset categories to invest in, like Stocks, Digital Gold, IPOs, Mutual Funds, and more.</span></div><div><span style="font-size: 11.5pt;">By focusing on our customers’ needs and equipping them with personalized yet powerful tools, we witnessed a steep growth of 800% in our customer base from 25 Thousand in 2017 to 2 Lakh in 2019. With 1500% growth in 2020, currently, over 4 million customers trust us with their investment decisions, thus setting us on the course to become an industry leader in the country.&nbsp;</span></div><div><span style="font-size: 11.5pt;">The company was founded in 2009 by </span><a style="font-size: 11.5pt;" href="https://www.linkedin.com/in/ravi-kumar-b7698171/">Ravi Kumar</a><span style="font-size: 11.5pt;"> and </span><a style="font-size: 11.5pt;" href="https://www.linkedin.com/in/sviswanath/">Shrinivas Viswanath</a><span style="font-size: 11.5pt;">, and in 2016 </span><a style="font-size: 11.5pt;" href="https://www.linkedin.com/in/kavitha-subramanian-6a761411/">Kavitha Subramanian</a><span style="font-size: 11.5pt;"> joined as the third co-founder. Backed by Ratan Tata, we raised $4 million in Series A funding (2016) led by Kalaari Capital. In 2019, US-based investment firm Tiger Global Management invested $25 million in a Series B funding round.&nbsp;</span></div><div><br></div><div><span style="font-size: 11.5pt;">Visit our </span><a style="font-size: 11.5pt;" href="https://www.linkedin.com/company/upstox/">Linkedin page </a><span style="font-size: 11.5pt;">to learn more about us.</span></div><div><br></div><div><br></div><div><b style="font-size: 14pt;">Role</b><span style="font-size: 11pt;">: </span><span style="font-size: 11.5pt;">SDE II - Application Security</span></div><div><br></div><div><br></div><div><b style="font-size: 14pt;">Responsibilities: </b></div><div><br></div><div>1) Design, develop, and maintain tools and web applications to automate security tasks and enhance security measures across the organization.</div><div>2) Develop and integrate security automation tools and processes into the CI/CD pipeline to ensure continuous security testing and compliance.</div><div>3) Create threat models to identify risks and implement controls to mitigate those risks.</div><div>4) Conduct security architecture and design reviews to identify and resolve issues in applications and infrastructure.</div><div>5) Develop and maintain security testing plans.</div><div>6) Review source code to identify potential security vulnerabilities.</div><div>7) Perform vulnerability assessments, penetration testing, and prioritize the identified vulnerabilities.</div><div>8) Develop proof of concept (PoC) exploits for vulnerabilities and collaborate with the engineering team to address them.</div><div>9) Solve complex vulnerabilities, such as business logic flaws, and communicate solutions to both technical and non-technical stakeholders.</div><div>10) Build and maintain strong relationships with key stakeholders and business partners.</div><div><br></div><div><b style="font-size: 14pt;">Required skills and experience:</b><span style="font-size: 11pt;">&nbsp;</span></div><div><br></div><div>1) 3 to 6 years of experience in Application Security with hands-on technical skills.</div><div>2) Strong understanding of web application security threats, exploits, and prevention techniques (SQL Injection, XSS, CSRF, etc.).</div><div>3) Proficiency in programming languages like Python, Go, or NodeJs, with experience in building security tools.</div><div>4) Experience with Kubernetes (K8s), cloud security, WAF, Bot manager, and securing web/mobile applications.</div><div>5) Implemented cryptographic controls to protect sensitive data and integrated SAST controls in CI/CD pipelines.</div><div>6) Familiar with Red team exercises, threat hunting, and OSINT practices.</div><div>7) Experience in mobile security testing, with knowledge of Selenium and Appium being an advantage.</div><div>8) Ability to estimate effort, meet deadlines, and communicate effectively.</div><div>9) Proven ability to influence others without direct authority.</div><div>10) Experience in Financial Services or Fintech is a plus, with a hands-on, problem-solving attitude.</div></div><div class="section page-centered" data-qa="closing-description"><div><a style="font-size: 12.6667px;" href="http://done.upstox/">Upstox</a><span style="font-size: 12.6667px;"> is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics,&nbsp; disability, age, veteran status, or other characteristics. </span></div></div><div class="section page-centered" data-qa="closing-description"><div><a style="font-size: 12.6667px;" href="http://done.upstox/">Upstox</a><span style="font-size: 12.6667px;"> is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics,&nbsp; disability, age, veteran status, or other characteristics. </span></div></div>undefined