About The Role As Lead Security Engineer at IQWorks, you will own security for a platform whose entire promise is protecting sensitive data. Security is not a feature bolted on at the end here — it is the product, and you will be the person who holds the bar. You will own our zero-trust architecture and the strict data-isolation guarantees that keep every customer's data separate, and you will make sure those guarantees hold as the platform grows.

You will threat-model new features, run security reviews on the code we ship, harden our cloud and on-premise deployments, and lead our response when something needs attention. You will stay hands-on — reading code, writing tooling, and fixing issues at the root — while setting the standards and secure-by-default patterns the whole engineering team builds around. This is a high-ownership role for someone who thinks like an attacker, builds like an engineer, and treats customer trust as the thing worth protecting.

What You Will Do Own the security posture of the IQWorks platform, from application code to infrastructure to on-premise deployments

Guard the zero-trust data-isolation model — keep multi-tenant separation airtight and enforce least-privilege access end to end

Threat-model new features and lead security reviews before they ship, working alongside the engineering team

Build and automate security tooling — static and agile analysis, dependency and secret scanning, and CI security gates

Run vulnerability management end to end: triage, prioritize, and drive fixes at the root cause

Lead incident response — detection, containment, remediation, and blameless post-mortems

Harden cloud and on-premise/edge environments so enterprises can process sensitive data without it leaving their infrastructure

Support enterprise security reviews and our compliance and certification program (SOC 2, ISO 27001, and similar)





Set secure-by-default patterns and raise the security bar across the team as the company scales What We Are Looking For 5+ years in security engineering, application security, or software engineering with a heavy security focus

Strong grasp of web application security — the OWASP Top 10, authentication, authorization, and secure application design

Hands-on experience securing multi-tenant SaaS, including database-level access controls and data isolation

Ability to read and write production code (TypeScript, and a backend language such as Go or Python) and fix issues yourself, not just file them

Experience with threat modeling, security reviews, and vulnerability management in a shipping product

Working knowledge of cloud security and hardening, and comfort reasoning about on-premise and edge deployments

Effective use of AI as a force multiplier across the security workflow — reviewing code, triaging findings, and building tooling — with sharp judgment about where human oversight is essential so security is never compromised

Clear communication and the ability to work directly with engineering, product, and founders in a fast-moving startup Nice to Have Experience with database-enforced authorization and fine-grained access-control models

Background in data privacy, compliance, or governance, and familiarity with regulations such as DPDPA, GDPR, or HIPAA

Experience driving SOC 2, ISO 27001, or similar certifications

Security certifications such as OSCP, CISSP, or GIAC

Experience securing AI/ML systems or LLM-based features against prompt injection and data-leakage risks

Prior experience as an early security hire at a high-growth startup Apply Now Full Name Email Phone LinkedIn Experience *Select0-1 years1-3 years3-5 years5-8 years8-12 years12+ years Notice Period SelectImmediate15 days30 days60 days90 days Expected Compensation Resume * Message I consent to IQWorks collecting and processing my personal data, including my CV, for recruitment purposes, in accordance with the Privacy Policy. Prefer email? Reach us at [email protected]

📌 Lead Security Engineer (Mumbai)
🏢 IQWorks
📍 Mumbai