Application Security Engineer-2 (Mumbai)

Application Security Engineer-2 (Mumbai)

02 Oct
|
Upstox
|
Mumbai

02 Oct

Upstox

Mumbai

Security Engineer 2 — Application Security

Location: Bangalore/Mumbai

Function: Application Security

Reports to: Director of Application Security

Experience: 3-5 years

About The Role

Upstox is looking for a Security Engineer 2 to join our Application Security team. This is a senior individual-contributor role for someone who has moved beyond executing assessments to owning the security posture of our cloud infrastructure, CI/CD pipelines, and containerized services — and who can write real production-quality code to build the internal tools that scale our security program. You'll work closely with engineering, platform, and DevOps teams to embed security into how we build and ship software, while also mentoring Security Engineer 1s and raising the technical bar across the team.

What You'll Do

• Own end-to-end security architecture reviews for current and changing systems — assessing the application layer, AWS infrastructure, and container/orchestration layer together as one system, rather than reviewing each in isolation,



and driving remediation of what you find at scale rather than flagging issues one at a time.
• Embed security checks directly into CI/CD pipelines (SAST, SCA/dependency scanning, container image scanning, secrets detection, IaC scanning) so vulnerabilities are caught before merge, not after deployment.
• Own container and orchestration security — hardening Docker images, reviewing Kubernetes configurations (RBAC, network policies, pod security standards), and closing gaps in how workloads are built and run in production.
• Design, build, and maintain in-house security tools and automation — think internal scanners, policy-as-code checks, dashboards that aggregate findings across systems, Just in time access tools or automation that removes manual steps from recurring assessments. This is a coding role as much as a security one.
• Perform penetration testing across web applications, mobile applications (Android/iOS), and APIs to identify vulnera

📌 Application Security Engineer-2 (Mumbai)
🏢 Upstox
📍 Mumbai

Reply to this offer

Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.

Subscribe to this job alert:

Get the latest job offers by email for: application security engineer-2 (mumbai) / mumbai