{"id":1227087,"url":"https://alion.io/job/cashfree-payments-principal-security-engineer","title":"Principal Security Engineer","company":{"id":917,"name":"Cashfree Payments","domain":"cashfree.com","url":"https://alion.io/company/cashfree","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Kula","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":61000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SIEM","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-25T11:57:30Z","employer_posted_date":null,"last_verified_at":"2026-09-25T11:57:30Z","board_verified":false,"closed_at":null,"days_open":24,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":24},"description":"Principal Security Engineer.\n\nEnd-to-End Security Posture, Architecture & Automation Leadership.\n\nLocation : Bangalore (Work From Office).\n\nReports to : CISO.\n\nCashfree Payments manages mission-critical payment and API infrastructure under RBI and PCI-DSS compliance. We require uncompromising security and resilience to handle high-volume financial transactions. We are building an automation-first, intelligence-driven security organization designed to scale with business growth without linear headcount expansion.\n\nRole Summary : \n\nThe Principal Security Engineer owns the security engineering strategy across application, cloud, and detection. \n\nThis role partners closely with Engineering, Platform, and GRC teams, with the authority to define security standards, guardrails, and architectural baselines. This is an engineering-driven security leadership position, not a ticket-triage or compliance reporting role. \n\nWe seek a highly autonomous, hands-on security engineer to own and elevate the organization's security posture end-to-end. This is a builder's role focused on designing scalable systems. \n\nThe role requires someone who : Operates independently, converting ambiguity into structured execution. Defines measurable security KPIs and delivers sustained improvement. Engineers scalable automation across the security lifecycle. Leads technical decision-making and mentors team members. Leverages AI and emerging technologies to amplify security impact.\n\nKey Responsibilities : \n\nEnterprise Security Posture & Risk Engineering : \n\n- Define and track measurable KPIs (risk reduction, MTTR).\n\n- Design and operationalize vulnerability lifecycle management.\n\n- Translate RBI and PCI-DSS expectations into automated technical controls and build engineering-driven audit readiness frameworks.\n\n- Identify and eliminate systemic security weaknesses.\n\nSecure Architecture & Cloud Security Engineering : \n\n- Architect and secure multi-account AWS environments, hardening Kubernetes (EKS).\n\n- Implement Zero Trust principles (mTLS, OAuth2, OIDC, JWT).\n\n- Engineer IAM, secrets management, encryption controls, and network segmentation (VPC architecture, WAF).\n\n- Embed security controls into Infrastructure-as-Code (Terraform).\n\nShift-Left & DevSecOps Automation at Scale : \n\n- Architect fully automated CI/CD-integrated security testing (SAST, DAST, SCA, Container scanning, IaC scanning, Secrets detection).\n\n- Build policy-as-code guardrails, engineer contextual vulnerability prioritization, and drive security-as-code adoption to reduce manual review dependency.\n\nOffensive Security & Threat Modeling Leadership : \n\n- Oversee and coordinate periodic VAPT engagements (internal and external).\n\n- Conduct advanced white-box security assessments and lead structured threat modeling (STRIDE).\n\n- Review authentication/authorization logic, evaluate API attack surfaces, and demonstrate exploitability where necessary.\n\nDetection Engineering, Incident Leadership & Response Maturity : \n\n- Design scalable detection strategies using cloud-native telemetry (CloudTrail, Kubernetes logs) and SIEM/SOAR.\n\n- Engineer contextual alerting, lead technical response during incidents, drive root cause analysis, and improve detection/response automation.\n\nAI-Driven Security Innovation : \n\n- Implement AI-assisted secure code review and vulnerability triage.\n\n- Identify and mitigate LLM security risks.\n\n- Automate prioritization using contextual risk signals and continuously evaluate emerging AI-driven security technologies.\n\nTechnical Leadership & Team Elevation : \n\n- Mentor team members, establish reusable security frameworks and engineering standards, influence architecture decisions, and build scalable security systems.\n\nTechnology Environment : \n\n- AWS (multi-account architecture).\n\n- Kubernetes (EKS-based microservices).\n\n- API-driven services (Java / Go / Node ecosystem).\n\n- CI/CD pipelines (Git-based workflows).\n\n- Infrastructure as Code (Terraform).\n\n- Centralized logging and monitoring stack.\n\nRequired Qualifications and Expertise : \n\n- B.Tech.\n\n- 9+ years of deep hands-on security engineering experience (or equivalent architectural depth).\n\n- Proven track record of independently driving security transformation.\n\n- Strong expertise in : AWS security architecture, Kubernetes & container security, Secure SDLC & CI/CD integration, IaC security, API & authentication security, Vulnerability lifecycle management, and Detection engineering.\n\n- Strong programming/scripting skills (Python/ Go).\n\n- Experience correlating technical risk to business impact.\n\n- Ability to operate effectively without detailed managerial direction.\n\nWhat Excellence Looks Like : \n\n- Security posture measurably improves quarter over quarter.\n\n- Automation replaces repetitive manual effort.\n\n- Critical vulnerabilities decline structurally.\n\n- Detection and remediation timelines consistently improve.\n\n- Audit cycles become predictable and engineering-driven.\n\n- Security scales without proportional headcount growth.\nSkills\nIT Security Strategy, Security Protocols, IT Risk, Cloud Security, DevSecOps, IT Automation, Threat Modeling, Incident Management, AWS, Vulnerability Management","description_format":"text","description_chars":5187,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-09-25T13:06:44Z"}],"visa":[],"liveness":{"score":50,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.792,"p_room":0.75,"age_days":24,"expected_fill_days":30,"reasons":["seen:24","velocity","win:late"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/cashfree-payments-principal-security-engineer","json_url":"https://alion.io/job/cashfree-payments-principal-security-engineer.json","meta":{"generated_at":"2026-10-20T06:30:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7096,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":917},"rest":"https://alion.io/mcp/rest/get_company?id=917"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcashfree-payments-principal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcashfree-payments-principal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcashfree-payments-principal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cashfree-payments-principal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcashfree-payments-principal-security-engineer"}]}