Senior Engineer - Application and Platform Security (India)
Juniper Square · Remote · India ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior Security Engineer
- Python + TypeScript
- Fully remote or hybrid
- AI security focus
- India based
Join the Platform Engineering team at Juniper Square to protect applications and cloud infrastructure used by over 2,300 GPs. You will write production code, design security guardrails, and use AI agents to enhance security workflows across financial data systems.
What you'll do
- Lead security design reviews and threat models for new product features
- Perform manual code reviews to find authorization and logic flaws
- Design secure-by-default libraries and custom static analysis rules
- Triage application findings and write actionable remediation guidance
- Threat-model AI features against prompt injection and data leakage
- Support external penetration testing from scoping through retest
- Partner on build pipeline and supply-chain security risks
- Build security automation and agents to reduce triage time
What you'll need
- 5+ years in application security or software engineering with security focus
- Deep experience finding vulnerabilities via manual code review
- Strong Python skills and working proficiency in JavaScript/TypeScript
- In-depth knowledge of OAuth 2.0, OIDC, SAML, and MFA implementation
- Experience leading threat modeling sessions with engineering teams
- Proficiency in running and tuning SAST, SCA, and DAST tools
- Working knowledge of cloud, container, and CI/CD security
- Understanding of LLM application risks and secure patterns
Nice to have
- Offensive web security background like bug bounties or CTFs
- Certifications such as OSWE or BSCP
- Experience building developer-facing security tooling
- Experience running a security champions program
- Familiarity with OWASP ASVS or OWASP Top 10 for LLMs
Stack
- Python
- JavaScript
- TypeScript
- OAuth 2.0
- OIDC
- SAML
- SAST
- SCA
- DAST
How you'll work
- Fully remote or hybrid options available
- Based in India with global team collaboration
- Digital-first operations across multiple regions