Senior Information Security Engineer

• *Senior Information Security Engineer**

========================================

• *Company:** Reward360 Global Services Private Limited
• *Location:** **Bengaluru, Karnataka, India** **Experience:** **4 to 5 Years** in Security Engineering
• *Department:** Information Security**Job Overview**

================

As a **Senior Information Security Engineer** at Reward360, you will be the technical anchor for our offensive and defensive security programs. You will lead efforts to secure our highly transaction\-heavy, enterprise\-grade loyalty and rewards platforms utilized by global banks. This senior position shifts focus from basic security execution to **architecting secure infrastructures, guiding DevSecOps maturity, and leading threat modeling** across our cloud\-native applications. You will work closely with engineering leadership to build automated, resilient guardrails that systematically eliminate application and cloud defects before they surface.

• *Key Responsibilities**

========================

• **Security Architecture \& Design:** Design, implement, and audit structural security controls for cloud\-native architectures. Provide advanced security blueprints to engineering teams building APIs and microservices.
• **Advanced Threat Modeling:** Lead architectural threat modeling workshops during early software development lifecycles to detect structural flaws before deployment.

• **DevSecOps Integration:** Own and mature the **CI/CD security pipeline**. Build custom tooling, automate SAST/DAST playbooks, and create frictionless loops that allow product engineers to resolve bugs rapidly.

• **Vulnerability \& Incident Leadership:** Direct the remediation strategy for vulnerabilities across corporate web applications, APIs, and microservices. Serve as a technical point of escalation for security incident response operations.
• **Cloud Security Posture Management:** Continuously assess and harden multi\-tenant **Amazon Web Services (AWS)** environments, establishing rigorous policies for IAM, network zoning, and perimeter firewalls.

• **Mentorship \& Governance:** Mentor junior security engineers and purple team members. Define enterprise security standards and support compliance objectives relevant to global financial operations.

• *Required Skills \& Experience**

=================================

• *1\. Technical Competency \& Architecture**
• -------------------------------------------

• Deep expertise in **application security architecture** and enterprise threat modeling patterns (e.g., STRIDE, PASTA).
• Superior understanding of advanced web, application, and cloud vulnerabilities, including the **OWASP Top 10** and OWASP API Security Top 10\.
• Mastery over cloud security principles, with practical engineering experience hardening **AWS cloud services**.

• *2\. Tooling, Scripting \& Automation**
• ---------------------------------------

• Prolific capability with **Python, Go, or JavaScript** to build security scripts, automate operational workflows, and integrate security solutions.
• Hands\-on command over enterprise SAST, DAST, SCA, and API testing platforms (e.g, Burp Suite, Caido, Semgrep, OWASP Dependency, Cyclonedx etc).
• Deep configuration knowledge of container security controls

(Kubernetes/Docker hardening) and SIEM/vulnerability scanners

• *3\. Education \& Professional Credentials**
• --------------------------------------------

• **Education:** Bachelor’s or Master's degree in Computer Science, Cyber Security, or equivalent technical fields.
• Certifications (Highly Valued): CEH/CRTO/CRTP/CPTS