{"id":2300544,"url":"https://alion.io/job/cashfree-payments-security-engineer-2-2","title":"Security Engineer-2","company":{"id":917,"name":"Cashfree Payments","domain":"cashfree.com","url":"https://alion.io/company/cashfree","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Kula","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15500,"max_usd":38000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":629},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Java","optional":false},{"name":"Node JS","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"SQL","optional":false},{"name":"Threat Modeling","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-10T21:06:27Z","employer_posted_date":"2026-10-11","last_verified_at":"2026-10-13T18:17:51Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Responsibilities:\nExamine the products in detail to discover vulnerabilities and collaborate with the other security engineers to practically demonstrate the exploitability and risk factors.\n\nBe on the forefront of emerging vulnerabilities/threats that could affect Cashfree products through independent research and study.\n\nEngage with the developers in developing workarounds/mitigation plans and ensure they are implemented per policy.\n\nThreat Modelling: Engage with the development teams to conduct secure design reviews/threat modeling exercise to enumerate threats and mitigation strategies.\n\nEnable the developers with knowledge of threat modeling by conducting focused workshops.\n\nSecure Coding: Priorities critical defects and ensure these are identified and mitigated during the sprint.\n\nIntegration and automation of SAST in the DevOps pipeline.\n\nBuild secure coding principles and propagate them across the development community.\n\nBe the to-go person for developers in solving critical issues relating to secure product development.\n\nBuild and enhance secure coding / security assessments training contents for developers and QA team.\n\nDeliver training programs at various levels in the organizations.\n\nConduct workshops/security tech-talks to disseminate security knowledge and awareness. Qualifications.\n\nGood knowledge in multiple classes of vulnerabilities that includes cross-site scripting, SQL Injection, CSRF, cryptographic related weakness, and code injection.\n\nGood knowledge of any programming/scripting languages such as Java, Ruby, and Python.\n\nGood knowledge relating to services/technology relating to the cloud.\n\nAbility to automate security testing and improve productivity in security assessments.\n\nAbility to communicate and interpret security vulnerabilities to various audiences such as development and management teams.\n\nRequirements:\nYou have great interpersonal skills, deep technical ability, and a history of successful execution in the assessments industry. If you enjoy discussing anything from procedural linking tables in kernels to remote code execution in JVMs, then we want you on the team.\n\nFamiliarity with industry-standard threat modeling, risk modeling, and vulnerability classification.\n\nExperience with pre-assessment architectural and API analysis to scope and prepare white-box and grey-box assessments.\n\nExperience working with in-house engineering organizations, S-SDLC/CICD software lifecycle and QA processes\n\nB. Tech. in Computer Science, Electrical, or Computer Engineering, or equivalent work experience as a software engineering or security practitioner.\n\n3+ years of relevant engineering or security assessment experience, experience in application security.\n\nPossess a broad knowledge of attack vectors, exploits, and mitigations that work at scale or may be linked together for chained attacks.\n\nExperience with Java, Go, Python, or Node.js (bonus points for more than one).\n\nExperience with assessing Cloud-native services, service meshes, and K notes-platform-based micro-services.\n\nBe able to apply unconventional thinking and problem-solve on the boundary of your knowledge base, learning new technologies or languages as needed to complete pen-test tasks.\n\nBe able to think both offensively (like a hacker) and defensively (evaluating product security and design)","description_format":"text","description_chars":3333,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-11T21:06:27Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":31,"reasons":["conf:2","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/cashfree-payments-security-engineer-2-2","json_url":"https://alion.io/job/cashfree-payments-security-engineer-2-2.json","meta":{"generated_at":"2026-10-13T19:42:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30164,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":917},"rest":"https://alion.io/mcp/rest/get_company?id=917"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcashfree-payments-security-engineer-2-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcashfree-payments-security-engineer-2-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcashfree-payments-security-engineer-2-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cashfree-payments-security-engineer-2-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcashfree-payments-security-engineer-2-2"}]}