Staff Security Engineer in Bangalore, भारत

Responsibilities

• Lead security architecture reviews and establish secure design standards, patterns, and guardrails.
• Design and build security tooling, automation frameworks, and scalable security services.
• Own application security programs, including SAST, DAST, SCA, CI/CD security controls, vulnerability assessments, penetration testing, and security reviews.
• Define cloud, infrastructure, identity, network, secrets, logging, data protection, zero-trust, and infrastructure-hardening initiatives across AWS environments.
• Lead incident response, detection engineering, threat hunting, red team exercises, adversary simulations, and security validation.
• Drive enterprise security, endpoint security, device management, identity and access management, phishing response, and insider-threat monitoring.
• Partner with legal and compliance teams on SOC 2, ISO 27001, GDPR, privacy reviews, audits, and security governance.
• Mentor engineers and influence product, engineering, infrastructure, and business decisions across the organization.

Requirements

• 7+ years of experience in security engineering, application security, cloud security, or related technical security disciplines.
• Hands-on expertise across application security, cloud security, detection and response, and infrastructure security.
• Experience conducting vulnerability assessments and penetration testing across web, API, and mobile applications.
• Deep knowledge of SAST, DAST, SCA, CI/CD security tooling, threat modeling, secure architecture, and modern attack techniques.
• Experience securing cloud environments, with AWS preferred, and experience with EDR, DLP, SIEM, and threat detection technologies such as CrowdStrike.
• Strong programming or scripting skills using Python, Go, or similar languages.
• Experience leading architecture reviews, complex security initiatives, and engineering decisions at scale.
• Excellent communication skills and ability to communicate technical risks to engineering teams and senior leadership.
• Preferred experience includes e-commerce or consumer platforms, red teaming, adversary emulation, Terraform, OPA, Google Workspace, Okta, internal security tooling, cloud-native organizations, and certifications such as OSCP, OSWE, CISSP, or CCSP.

Benefits

• The role offers the opportunity to work on meaningful security challenges at a mission-driven company reshaping retail.
• Employment is contingent upon successful completion of a background check.
• Quince provides equal employment opportunities and reasonable accommodations for qualified individuals with disabilities.