Tech Lead / Principal Engineer - Security

Job Description

The Upstox Story:Upstox (RKSV Securities India Pvt. Ltd.) is one of Indias leading Discount Broking companies which enables investors and traders to trade in Stock Market and Commodities exchange at a fraction of market price with our state-of-the-art trading platform.One of the fastest growing stock broking companies and first brokers in India to introduce commission-free trading for investors. Our customers enjoy zero brokerage on equity delivery trades and a flat Rs. 20 per order pricing model on all other segments.We are on our way to become the leader in low-cost brokerage and No.1 stock broker in the country. We scaled from a customer database of 25k customers in 2017 to 2 Lakh customers in 2019 to 2+ Million customers now.The company will continue to be driven by its guiding principle of making trading in stock markets simple and affordable for all.Company s focus on high-design and leading-edge technology seeks to revolutionise the online trading industry in India, all at disruptive price points. Backed by Ratan Tata, Upstox had raised $4 million in Series A funding in early 2016 that was led by Kalaari Capital. The round also saw participation from health care tech firm GVK Davix Technologies Pvt Ltd. US-based investment firm Tiger Global Management invested $25 million in the company in September 2019 in a Series B funding round.We have a team of highly skilled technology and finance professionals, and are currently looking for highly motivated field experts to be part of our high-energy team.Location: Mumbai (Parel/Prabhadevi)Designation: Tech Lead / Principal Engineer - SecurityRoles & Responsibilities:- You will be responsible to function as a single point of contact for Information Security deliverables across organization.- You will be majorly involved in network, system security and design, management, monitoring, incident response, etc.- Help internal product teams architect solutions securely and ensure designs meet security policy and standards.- Responsible for executing SOP s, Policies, Procedures, etc as and when required- Ensure that the processes, policies and procedures involving all company services are kept up to date, and are being followed appropriately.- Perform risk, business impact, control and vulnerability assessments, and in define treatment strategies.- Will be responsible to deal with regulatory audits and providing reports to the authorities for audit and compliance.- Partner with IT Enterprise Architecture working groups to develop and approve architectures and strategies.- Secure Cloud (external and hybrid) environments (SaaS, IaaS & PaaS).- Will be responsible to plan Future security posture to address developing Cybersecurity threat landscape.- Will be required to possess a good combination of creative and analytical skills in order to be able to deliver complex documents and connect the dots .Required Skills & Experience:- Knowledge of information security standards and controls (e.g., NIST, ISO 27001/27002, RBI and SEBI guidelines), rules and regulations related to information security and data confidentiality and desktop, server, application, database, network security principles for risk identification and analysis.- Strong knowledge of security controls and operations including network security technologies (Firewall, Load Balancer, WAF, PAM, Security configuration manager and Application security), OS hardening, file integrity monitoring, authentication.- Strong background in multiple security disciplines and technologies, including network and endpoint security, identity and access management, end-user security services, SIEM, and security automation/orchestration, including deployment in public cloud (AWS) environments.- Practical experience and deep knowledge in Application security test (Static and Dynamic), PAM, load balancer and WAF.- Possess a deep understanding of operations and network security and common security weaknesses.- Strong interpersonal and presentation skills- Exceptional communication and interfacing skills with technical and non-technical audiences.- Ability to work with minimal levels of supervision or oversight- Good conflict management skills- Strong vendor management & Project coordination skillsGood to Have:- Experience in Automation with Ansible or Terraform- Scripting in Python or BashPsst tips on how you can beat the competition:If you can showcase your abilities to:Be self-driven / quick starterHave an ownership mindsetAggressively drive and deliver resultsIf you fit the above description, we would love to connect with you! APPLY NOW A basic requirement but one that many forget: Make sure you know what we do. At the very least, try the app.,

Keyskills :
javalinuxjavascriptframeworkinformation security standardsstock marketstock brokingonline tradingsecurity policynetwork securityvendor managementanalytical skillsaccess management