About the Company

Location:
Bangalore Team: Information Security / AppSec

Experience:
5–8+ Years As a Senior Security Engineer at Flipkart Finance Private Limited (FFPL), you will be the technical cornerstone of our security posture. This is a high-impact, hands-on role requiring a blend of technical expertise in Vulnerability Assessment and Penetration Testing (VAPT) and solid stakeholder management skills. You will oversee the end-to-end security lifecycle of our products, cloud infrastructure (GCP), and third-party integrations, ensuring that FFPL remains resilient against evolving threats while maintaining compliance with rigorous financial regulations.

About the Role
As a Senior Security Engineer at Flipkart Finance Private Limited (FFPL), you will be the technical cornerstone of our security posture, overseeing the end-to-end security lifecycle of our products, cloud infrastructure (GCP), and third-party integrations, while ensuring resilience against evolving threats and compliance with rigorous financial regulations. Responsibilities

Key Responsibilities
1. Hands-on Technical Testing (VAPT)
• Conduct comprehensive Vulnerability Assessments (VA) and Penetration Testing (PT) across FFPL’s ecosystem, including Web Applications, Mobile Apps (Android/iOS), APIs, and Infrastructure.
• Perform deep-dive Cloud Security Reviews, specifically focusing on Google Cloud Platform (GCP) environments.
• Execute independent security testing to validate the integrity of new features before they go live. 2. Vendor & Stakeholder Liaison
• Act as the primary technical point of contact for external VAPT vendors and third-party development partners.
• Organize and lead walkthroughs between external testers and the FFPL Product/Engineering teams.
• Clarify technical requirements for external teams and evaluate the quality and performance of vendor-led security assessments. 3. Vulnerability Management & Remediation




• Collate vulnerabilities from multiple sources: manual testing, automated tools, and external reports.
• Analyze findings, perform revalidation/retesting, and share actionable insights with the development team.
• Manage a centralized VA/PT Tracker, ensuring every finding is tracked from discovery to verified closure with valid Evidence of Closure (EoC) and Proof of Concept (PoC). 4. Cloud Security & Infrastructure Collaboration
• Partner closely with SRE (Site Reliability Engineering) to remediate infrastructure gaps.
• Manage and monitor security tools including Ox, Tenable, Sentinel (XDR), and Google Security Command Center (SCC).
• Collaborate with Group Flipkart AppSec and IT teams for the installation, licensing, and upgrading of security software. 5. Compliance & Audit Support
• Maintain meticulous records of security testing and remediation for regulatory scrutiny.
• Support the organization during audits such as ISO 27001 LA, NIST 2.0, and RBI IS Audits, providing necessary technical evidence and documentation.
• Support the CISO in a couple of other random activities on a need basis. Qualifications
•

Experience:
5–8+ Years Required Skills
• VAPT Excellence: Proven experience in manual and automated testing for OWASP Top 10 (Web/API/Mobile).
• Cloud Security: Deep familiarity with GCP (IAM, VPC Service Controls, GKE security, etc.).
• Tooling: Proficiency with Tenable, Burp Suite, Postman (API testing), and XDR solutions like Microsoft Sentinel.
• Compliance Knowledge: Understanding of financial sector regulations (RBI guidelines) and security frameworks (NIST, ISO). Preferred Skills
• Certifications: OSCP, CEH, CISSP, or Google Professional Cloud Security Engineer.
•

Experience:
Prior experience in FinTech or Banking sectors is a massive plus.
• Communication: Ability to translate complex technical vulnerabilities into business risk for non-technical stakeholders.

📌 Senior Application Security Engineer (Bengaluru)
🏢 Flipkart
📍 Bengaluru