About the role
TecHindustan is looking for a Senior Security Engineer to take ownership of security across our applications, cloud infrastructure, Kubernetes platform, CI/CD pipelines, and edge layer.
This role is highly hands-on and requires close collaboration with Platform, Backend, DevOps, and Engineering teams. The ideal candidate will have strong experience securing cloud-native production environments and be comfortable working across application, infrastructure, and cloud security.
The ideal candidate will be someone who can go beyond identifying security issues and take ownership of implementing effective controls. You should be comfortable reviewing code, understanding architecture, testing security boundaries, investigating incidents, and working directly with engineering teams to improve the overall security posture.
What you’ll work on
- Conduct threat modelling for critical business flows including authentication, sessions, payments, wallets, and bonuses
- Implement and strengthen Kubernetes security including RBAC, namespace isolation, network policies, admission controls, pod security, and runtime hardening
- Perform application security reviews across Node.js and TypeScript services, with a strong understanding of authentication, authorization, input validation, and OWASP practices
- Secure CI/CD pipelines through SAST, SCA, secret scanning, container image scanning, image signing, pinned digests, and least-privilege credentials
- Manage application and infrastructure secrets and keys, including secure injection, rotation, revocation, and KMS
- Strengthen edge security using Cloudflare WAF, rate limiting, bot management, DDoS protection, TLS, and origin protection
- Build and improve security telemetry, detection rules, SIEM integrations, alerting, and incident response runbooks
- Own vulnerability management, including risk-based prioritisation, remediation tracking, SLA management, and external penetration testing coordination
- Support security audits and regulatory requirements related to access controls, audit trails, data residency, retention, and change management
- Participate in production security incidents, lead root-cause analysis, and drive preventive and corrective actions
What we’re looking for
- 4+ years of experience in Security Engineering, with at least 3 years securing cloud-native production environments
- Strong hands-on experience with Kubernetes security, including RBAC, network policies, admission controllers, and runtime security
- Strong application security knowledge with Node.js and TypeScript-based services
- Solid understanding of AWS and/or Azure security, including IAM, segmentation, logging, key management, and security guardrails
- Experience with Terraform or Pulumi and infrastructure/supply-chain security
- Hands-on experience with Cloudflare, CDN, WAF, rate limiting, bot management, TLS, and origin security
- Experience with threat modelling and risk-based vulnerability assessment
- Experience with SIEM, detection engineering, security monitoring, and alert tuning
- Strong understanding of production incident response and post-incident analysis
- Proficiency in at least one scripting/programming language such as Python, Bash, Go, or TypeScript
