Security Engineer 3 – Cloud & AI Security

About the role

Jupiter is seeking a Security Engineer 3 to strengthen the security of its fintech platform. You will work on web and Android penetration testing, DevSecOps pipeline hardening, and security automation, leveraging AI to improve tooling and workflows.

Key responsibilities

• Design and implement automation frameworks for threat detection, remediation, and compliance across cloud and application layers.
• Develop scripts and tools to increase security visibility for AI model pipelines, APIs, and data integrations.
• Integrate security controls into CI/CD pipelines, including SAST, DAST, SCA, and IaC scanning.
• Lead periodic VAPT for web, mobile, AI platforms, and connected services.
• Secure AWS environments, maintain IaC security baselines, configure WAF rules, and enforce secrets management, IAM policies, and container security.
• Collaborate with engineering teams to remediate vulnerabilities and enforce secure SDLC practices.
• Conduct internal security training, phishing simulations, and support ISO 27001, SOC 2, DPDPA, and PCI DSS compliance.

Required profile

• 6+ years of experience in product security or a related field.
• Hands‑on experience with security assessments, threat modeling, code reviews, and penetration testing.
• Strong understanding of secure coding practices and secure SDLC principles.
• Excellent communication and collaboration skills.

Required skills

• Web and Android penetration testing.
• DevSecOps pipeline hardening.
• Security automation and scripting (Python, Bash).
• AWS security tooling and IaC (Infrastructure as Code).
• CI/CD security integration (SAST, DAST, SCA, IaC scanning).
• VAPT, threat modeling, OWASP, CWE, CVSS.
• WAF configuration, DDoS mitigation, secrets management, IAM, container security.