Security Engineer

About the Company:

Scapia! A co-branded credit card that s out there to make travel happen for people, by converting their everyday expenses into travel experiences. We re a bunch of passionate people who work together, brainstorm, and debate with each other, and don t stop until we re proud of our work. Customer delight tops everything else! We ve worked hard to create an environment of honesty and passion that sets everyone up for success.

Role Overview:

We are looking for a Security Engineer to join our fast-growing engineering org and play a key role in shaping our security foundation. You will build security frameworks, integrate security into the SDLC, and drive key security initiatives that shape our systems and engineering practices. You will partner closely with product and engineering teams to make security a natural part of everything we build and ship to our customers.

Responsibilities:

• Perform security review across mobile, web, cloud and backend systems.

• Perform threat modeling, design, and architecture reviews to identify potential security risks.

• Build and maintain in-house security frameworks to ensure these can be integrated into SDLC as we scale.

• Collaborate with engineering and product teams to ensure security is an integral part of the process for the product or features that we ship to our customers.

• Promote a security-first culture through security awareness training and conducting developer focused CTFs.

• Drive the responsible disclosure program and handle internal security investigations.

Profile:

• 1-3+ years of hands-on experience in security engineering.

• Strong knowledge of web, mobile, and cloud security.

• Experience designing and building security frameworks.

• Proficient in Python, Go, and Infrastructure-as-Code.

• Experience with manual source code review.

Good to have:

• Actively participated in bug bounty programs and CTF competitions.

• Public speaking in security conferences or meetups.