Senior Security Engineer (Player/Coach)

About the role:

FundMore.ai builds software for regulated lenders. We are hiring a Senior Security Engineer (player/coach) to be our senior security technologist: you will read code, challenge architecture and lead the technical response when something goes wrong. Most of the role is hands-on; the rest is raising the security skills of our engineers.

Responsibilities:

* Review pull requests and designs for security-relevant changes (authentication, authorization, multi-tenant data isolation, integrations).

* Threat-model new features, APIs and third-party integrations before they ship.

* Assess and harden our AWS environment: identity and access, network segmentation, secrets, encryption and logging.

* Build security into the CI/CD pipeline (static analysis, dependency and secret scanning, IaC checks).

* Build detection and alerting; run or commission penetration tests.

* Act as technical incident lead: triage, containment, root-cause analysis; run tabletop exercises.

* Own secure coding standards, mentor engineers and grow a security champions group.

* Support customer security questionnaires and audits (SOC 2, ISO 27001).

Requirements:

* 5 to 8 years in security engineering with a strong cloud security background.

* Expert in TypeScript; found and fixed serious vulnerabilities through manual code review.

* Designed or reviewed the security architecture of a multi-tenant SaaS platform on AWS.

* Led the technical response on real security incidents.

* Strong threat-modelling, mentoring and communication skills.

Nice to have: penetration testing, detection engineering, AI/ML security, DLP (Data Loss Prevention), Cyber Supply Chain Risk Management (C-SCRM), OSFI B-10/B-13, PIPEDA, OSCP/OSWE/GIAC.

Location: Bengaluru (hybrid). Incident on-call is shared across senior engineering staff.