ACKO is India's first and only fully-digital Insurtech (product) company to have taken insurance by storm. You might have seen our cool ads or are already a customer and we hope you have noticed how we are rewriting the rules of the insurance game constantly and persistently.

In only four years since our inception and operations, our products have reached 75M unique users. We have partnered with some of the biggest names of the digital ecosystem such as Amazon, Ola, RedBus, Oyo, Lendingkart, ZestMoney, GOMMT group etc.

If you think we're just about growth and numbers, employee wellbeing lies at the core of all our programs and policies. We are a regular 'Great Place to Work' winner and consistently feature on Linkedin's list of top startups. Perform Security reviews, Vulnerability Assessments & Penetration Testing for Web, Android, iOS, and API endpoints

Perform Threat Modelling & anticipate potential attack vectors and improve security architecture on complex or cross-functional components

Automate security checks using tools like SonarQube, Snyk, Trivy, etc.

Perform security assessments of AWS, Azure, and GCP environments, with an emphasis on container security,



particularly for Docker and Kubernetes.

Implement guardrails for IAM, network segmentation, encryption, and cloud monitoring

Contribute to infrastructure hardening for containers, Kubernetes, and virtual machines

Act as the primary responder for external security disclosures

Maintain documentation and metrics related to bug bounty and penetration testing activities

Lead security design reviews for current features and products

Provide actionable risk assessments and mitigation plans to stakeholders

Required Skills & Experience:

- 5 - 8 years of solid hands-on experience in the VAPT domain
- Solid understanding of Web, Android, and iOS application security
- Experience with DevSecOps tools and integrating security into CI/CD
- Strong knowledge of cloud platforms (AWS/GCP/Azure) and their security models
- Good knowledge of API security
- Scripting experience (Python, Bash, or similar) for automation tasks

OSCP, CEH, AWS Security Specialty, or similar certifications

Experience working in a regulated environment (e.g.,

📌 AWS Security Engineer (Bengaluru)
🏢 Acko
📍 Bengaluru