Senior Security Engineer, India (Remote, Full-Time) [AS219]

About Smart Working At Smart Working, we believe your job should not only look right on paper but also feel right every day. This isn’t just another remote opportunity - it’s about finding where you truly belong, no matter where you are. From day one, you’re welcomed into a genuine community that values your growth and well-being.

Our mission

is simple: to break down geographic barriers and connect skilled professionals with outstanding global teams and products for full-time, long-term roles. We help you discover meaningful work with teams that invest in your success, where you’re empowered to grow personally and professionally. Join one of the highest-rated workplaces on Glassdoor and experience what it means to thrive in a truly remote-first world.

About the Role

We are hiring a Senior Security Engineer to play a key role in embedding security across a modern, product-led technology platform. This is a hands-on position operating at the intersection of application security, cloud infrastructure security, and security operations. You will work closely with engineering teams to ensure systems are secure by design, not as an afterthought. This role is focused on identifying real risks, prioritising effectively, and driving remediation in collaboration with developers. As an early and influential security hire, you will have high ownership and autonomy, helping define security standards, improve processes, and shape how security is integrated across the organisation.

Responsibilities Own and evolve vulnerability management end-to-end, from identification and triage to remediation tracking. Embed secure design principles across mobile applications, APIs, and microservices. Partner closely with engineering teams to remediate security issues, not just report them. Conduct threat modelling and risk assessments to identify and prioritise vulnerabilities. Improve security visibility, monitoring, and alerting across systems. Define and implement security standards, best practices, and policies. Drive DevSecOps integration, including CI/CD security tooling and automation. Strengthen cloud security posture across AWS, GCP, or similar environments. Support compliance requirements within regulated environments. Introduce automation to reduce manual security overhead and improve efficiency. Requirements 7+ years of experience in security engineering or related roles. 5+ years of experience in Application Security (AppSec). 3+ years of experience in threat modelling and risk assessment. 3+ years of experience applying secure coding principles (e.g. OWASP). 2+ years of experience in DevSecOps practices, including CI/CD security integration. 2+ years of experience with container security (Docker, Kubernetes). 2+ years of experience with cryptography principles and secure implementations. Strong experience working in cloud environments (AWS, GCP, or similar). Proven experience collaborating with engineering teams to drive remediation. Experience leading or owning security initiatives or projects. Strong problem-solving skills and ability to prioritise risks effectively. Nice to Have Experience working in fintech, banking, or other regulated environments. Experience improving or scaling security processes in growing organisations. Familiarity with security monitoring and alerting tools. Strong interest in automation and improving developer security workflows. Benefits Fixed Shifts: 12:00 PM - 9:30 PM IST (Summer) | 1:00 PM - 10:30 PM IST (Winter) No Weekend Work: Real work-life balance, not just words Day 1 Benefits: Laptop and full medical insurance provided Support That Matters: Mentorship, community, and forums where ideas are shared True Belonging: A long-term career where your contributions are valued