Senior Security Engineer (Application & Cloud Security)

Job Title - Senior Security Engineer (Application & Cloud Security)

Location : Chennai

About Tazapay

Tazapay is a cross border payment service provider. They offer local collections via local payment methods, virtual accounts and cards in over 70 markets. The merchant does not need to create local entities anywhere and Tazapay offers the additional compliance framework to take care of local regulations and requirements. This results in decreased transaction costs, fx transparency and higher auth rates.

They are licensed and backed by leading investors. www.tazapay.com

What's exciting waiting for you?

This is an amazing opportunity for you to join a fantastic crew before the rocket ship launch. It will be a story you will carry with you through your life and have the unique experience of building something ground up and have the satisfaction of seeing your product being used and paid for by thousands of customers. You will be a part of a growth story in securing critical payment infrastructure that spans both application security and cloud security across 70+ markets.

We believe in a culture of openness, innovation & great memories together.

About the Senior Security Engineer Role

As a Senior Security Engineer, you will play a pivotal role in securing our entire technology stack - from application-level security to cloud infrastructure protection. You will lead comprehensive security initiatives across our AWS cloud environments and payment applications built with Node.js and GoLang microservices, while leveraging AWS security services and modern security tools to protect against evolving threats. This role combines deep technical expertise in both application security and cloud security with leadership responsibilities.

Key Responsibilities

Application Security Leadership

• Lead comprehensive security assessments of microservices-based applications built with GoLang, Java, or Scala
• Conduct advanced security reviews of Vue.js and ReactJS frontend applications and their integration with backend services
• Execute expert-level manual and automated web application penetration testing using industry-standard methodologies (OWASP Testing Guide, PTES)
• Design and implement vulnerability scoring and risk assessment frameworks using CVSS, OWASP Risk Rating, and custom business impact metrics
• Utilize govulncheck for Go-specific vulnerability detection and dependency analysis across microservices
• Deploy Semgrep / OpenGrep for advanced static code analysis and custom security policy enforcement
• Integrate Gitleaks for comprehensive secret detection across development workflows
• Lead secure development lifecycle (SDLC) integration and establish security standards for development teams
• Perform complex web application penetration testing including authentication bypass, authorization flaws, injection attacks, and business logic vulnerabilities

AWS Cloud Security Architecture

Security Automation & Monitoring

Vulnerability Management & Risk Assessment

Compliance & Regulatory Security

Technical Leadership & Strategy

Required Qualifications

Experience

Technical Skills

Security Expertise

Nice to Have

Certifications

Additional Skills

Key Abilities and Traits

Technical Excellence : Demonstrated ability to architect and implement comprehensive security solutions across complex application and cloud environments processing sensitive financial data.

Leadership : Proven capability to lead security initiatives across multiple teams, influence strategic decisions, and mentor engineering talent while representing security needs to executive leadership.

Strategic Thinking : Ability to balance immediate security needs with long-term strategic objectives, translating business requirements into technical security solutions.

Problem-Solving : Expert-level analytical and problem-solving skills with the ability to address complex security challenges spanning application code to cloud infrastructure.

Communication : Exceptional verbal and written communication skills, capable of explaining complex security concepts to technical teams, business stakeholders, and executive leadership.

Continuous Innovation : Commitment to staying current with emerging security threats, technologies, and industry best practices while driving security innovation within the organization.

Project Management : Advanced ability to manage multiple complex security initiatives simultaneously while ensuring compliance with regulatory requirements and business objectives.

Mentorship : Strong commitment to developing junior security talent and fostering a security-conscious culture across engineering teams.

Join our team and let's groove together to the rhythm of innovation and opportunity!

Your Buddy,

Tazapay