building the best consumer experience for your money. We're building every product from scratch to be quick, transparent, and feel good, because we believe that the best products transcend demographics, like how great music touches most of us.

Our cornerstone products and services: slice savings account, slice UPI credit card, slice UPI, and slice business are designed to be simple, rewarding, and completely in your control. We tailor our working experience with the belief that the present moment is the only real thing in life. We're backed by some of the world's leading investors, including Tiger Global, Insight Partners, Advent International, Blume Ventures, and Gunosy Capital.

As a Cyber Security Engineer at slice, you will play a key role in strengthening our Application and Product Security program by embedding security throughout the Software Development Lifecycle (SDLC). You will work closely with engineering, product, and infrastructure teams to identify security risks early, conduct security assessments, and help build secure, scalable products that meet industry standards and compliance requirements.
Perform end-to-end Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, Android, and iOS applications.
Conduct Secure Design Reviews and identify potential security risks during the design phase.
Validate security controls and perform security re-testing after vulnerabilities are remediated.
Prepare detailed security assessment reports with transparent remediation guidance and risk prioritization.

Perform static and agile security analysis of Android and iOS applications.
Assess REST APIs and microservices for authentication, authorization, business logic, and data exposure vulnerabilities.
Sensitive Data Exposure
SSRF, XXE, CSRF, XSS, and related web security issues
.




Provide secure coding recommendations and remediation guidance.
Contribute to the implementation and improvement of SAST, DAST, SCA, Secret Scanning, and Infrastructure-as-Code (IaC) security practices.
Develop scripts and automation to improve security testing and vulnerability management workflows.
1–2 years of experience in Application Security, Product Security, or Cyber Security.
~ Strong understanding of web application, API, Android, and iOS security concepts.
~ Hands-on experience performing penetration testing of web applications, APIs, and mobile applications.
~ Hands-on experience in identifying and assessing network security vulnerabilities and security misconfigurations.
~ Good understanding of Secure Software Development Lifecycle (SSDLC) and secure coding practices.
~ Experience writing technical security reports and communicating remediation recommendations.
~ Experience with Linux systems and networking fundamentals.
~ Experience with scripting using Python, Bash, or similar languages for automation.

Experience with one or more of the following tools is preferred:
Familiarity with AWS security concepts.
Experience with SAST, DAST, SCA, Secret Scanning, and IaC Security.
Experience with cloud-native application security.
Contributions to open-source security projects.
Familiarity with AI-assisted security testing and automation.

Life so good, you'd think we're kidding:
Competitive salaries. An extensive medical insurance that looks out for our employees & their dependents. Flexible working hours. Just don't call us at 3AM, we like our sleep schedule.
Tailored vacation & leave policies so that you enjoy every significant moment in your life.
Learning and upskilling opportunities. Seriously, not kidding.
Good food, games, and a cool office to make you feel like home.

📌 Cyber Security Engineer (Hybrid (Bengaluru)
🏢 Slice
📍 Bengaluru