SDE-III – Information Security

Role:

Department:

Location:

Employment Type:

About Amber

Amber is a global student accommodation platform helping students find and book verified housing across 250+ cities. With over 1 million beds listed and millions of users worldwide, we are building a secure, resilient, and scalable ecosystem that supports students, partners, and universities across the globe.

SDE-III – Information Security

Role Overview

SDE-III – Information Security

You will work across engineering, product, data, and cloud teams to embed security standards throughout the development lifecycle and ensure compliance with international security and privacy requirements.

This is a senior-level, high-impact role with significant ownership, autonomy, and influence on technical decision-making.

Key Responsibilities

Security Architecture & Engineering

• Design, implement, and scale security architecture for a global customer base across multiple regions.
• Develop security frameworks and best practices aligned with global standards (OWASP, NIST, CIS).
• Conduct security design reviews, threat modeling, and risk assessments for new and existing systems.

Application & Product Security

• Secure Amber’s web, API, mobile, and platform products used by customers worldwide.
• Integrate SAST, DAST, SCA, and container scanning tools into global CI/CD pipelines.
• Perform code reviews and provide guidance to engineering teams on secure coding principles.

Cloud & Infrastructure Security

• Strengthen cloud security posture across AWS multi-region deployments.
• Implement IAM governance, secrets management, network isolation, and workload protections.
• Automate detection and remediation of cloud misconfigurations across global environments.

Security Operations & Automation

• Lead incident response for global systems and coordinate cross-functional communication.
• Build automation for log ingestion, anomaly detection, and response workflows.
• Improve observability and response capabilities using SIEM/SOAR tools.

Governance, Compliance & Global Standards

• Support Amber’s global compliance programs including

  SOC2, ISO 27001, GDPR, PCI-DSS

  , and region-specific privacy regulations.
• Conduct vendor and partner security evaluations across international markets.
• Build and maintain security documentation, policies, and global processes.

Qualifications & Skills

Must-Have

• 6–10 years of experience in Information Security, Application Security, or Cloud Security roles.
• Expertise in securing large-scale, customer-facing platforms or SaaS products.
• Strong experience with AWS security services across multi-region architectures.
• Proficiency in one or more languages: Python, Go, Java, or Node.js.
• Hands-on experience with CI/CD security tools (SAST, SCA, DAST, container scanning).
• Deep understanding of OWASP Top 10, secure SDLC, threat modeling, and vulnerability management.
• Experience working with global teams and supporting systems with international user bases.

Good-to-Have

• Experience with Kubernetes security, container runtime protections, and eBPF tools.
• Experience building custom security automation or internal security tools.
• Familiarity with SIEM/SOAR, EDR, IDS/IPS, and advanced threat detection systems.
• Security certifications: OSCP, OSWE, GIAC, CISSP, CSSLP, CISM.

What We Offer

• Competitive global compensation package.
• Opportunity to safeguard a high-scale global platform impacting millions of users.
• Ownership, influence, and room to innovate within a fast-scaling environment.
• Inclusive and collaborative culture focused on learning and excellence.