About the role
Security & Compliance Engineer (Senior)
Experience band: 7–10 years·Needed on day one
Owns the security design of the gateway and its mapping
to regulatory expectations.
Responsibilities
•Produces the threat model; hardens the platform;
owns mTLS/PKI, secrets management, access reviews and kill-switch drills
•Maps controls to RBI IT governance and
outsourcing directions and to the DPDP Act; supports client security testing
and remediation
•Reviews the client’s existing gateway deployment
for keys, logs and access hygiene
Must have
•7+ years in security engineering
•PKI and mTLS, HashiCorp Vault or equivalent,
Kubernetes security, SIEM integration
•Has faced auditors or regulators in a banking or
financial-services environment
Nice to have
•AI/LLM security (OWASP Top 10 for LLM
applications)
•CISSP, CISM or equivalent