About the role
Oolka is looking for a hands-on senior security engineer to own security across our AWS cloud infrastructure, application layer, and data protection posture for a consumer fintech platform handling sensitive financial and personal data. You'll be the primary driver of threat detection, vulnerability management, data protection, and incident response — working closely with engineering to build security into the SDLC rather than bolting it on afterward. This is a hybrid infrastructure-security and application-security role with a compliance dimension, suited to someone who's comfortable moving between AWS console/IaC work, code review, and writing the occasional policy or audit response.
What you'll own
Cloud infrastructure & threat detection — Design and maintain our AWS security baseline (account structure, network segmentation, IAM least-privilege) and run our detection stack (GuardDuty, Security Hub, CloudTrail, Config). You'll be the first responder when something looks anomalous,



and you'll own the tooling that makes anomalies visible in the first place rather than discovered after the fact.
Data protection & PII — Own encryption strategy (KMS key management, field-level encryption/tokenization for high-sensitivity data like PAN and credit information), data classification (Macie), and access governance across RDS, MongoDB, and S3. You'll also own data handling policy for non-production environments — making sure real customer PII never ends up in staging/QA.
Application security & vulnerability management — Build and maintain our SAST/SCA/secrets-scanning pipeline in CI/CD, triage and drive remediation of findings with engineering teams, run or coordinate periodic penetration testing, and review code/architecture for injection vulnerabilities (SQL, NoSQL, and increasingly prompt injection in our AI-assisted features).
Perimeter & availability — Own our WAF rule sets, DDoS protection posture (Shield, rate limiting), and API-level abuse protection,

📌 Senior Security Engineer (Bengaluru)
🏢 Oolka
📍 Bengaluru