Product Security Specialist

Yubi, formerly known as CredAvenue, is re-defining global debt markets by freeing the flow of finance between borrowers, lenders, and investors. We are the world's possibility platform for the discovery, investment, fulfilment, and collection of any debt solution. At Yubi, opportunities are plenty and we equip you with tools to seize it.

In March 2022, we became India’s fastest fintech and most impactful startup to join the unicorn club with a Series B fundraising round of $137 million.

In 2020, we began our journey with a vision of transforming and deepening the global institutional debt market through technology. Our two-sided debt marketplace helps institutional and HNI investors find the widest network of corporate borrowers and debt products on one side and helps corporates to discover investors and access debt capital efficiently on the other side. Switching between platforms is easy, which means investors can lend, invest and trade bonds - all in one place. All 5 of our platforms shake up the traditional debt ecosystem and offer new ways of digital finance.

Yubi Loans – Term loans and working capital solutions for enterprises.

Yubi Invest – Bond issuance and investments for institutional and retail participants.

Yubi Pool– End-to-end securitisations and portfolio buyouts.

Yubi Flow – A supply chain platform that offers trade financing solutions.

Yubi Co.Lend – For banks and NBFCs for co-lending partnerships.

Currently, we have boarded over 4000+ corporates, 350+ investors and have facilitated debt volumes of over INR 40,000 crore.

Backed by marquee investors like Insight Partners, B Capital Group, Dragoneer, Sequoia Capital, LightSpeed and Lightrock, we are the only-of-its-kind debt platform globally, revolutionizing the segment.

At Yubi, people are at the core of the business and our most valuable assets. Yubi is constantly growing, with 650+ like-minded individuals today, who are changing the way people perceive debt. We are a fun bunch who are highly motivated and driven to create a purposeful impact. Come, join the club to be a part of our epic growth story.

Job Description

Experience conducting vulnerability assessment of web application, APIs and mobile (Android & iOS) applications using manual and automated methods.

Experience working on code analysis (SAST, DAST, IAST, etc.,) along with the ability to demonstrate a POC of the identified vulnerability / exploit.

Security configuration reviews for various Yubi’s products.

Experience working on Source Code Reviews.

Experience analysing authentication and authorization : SAML, OAuth, LDAP, AD, etc.,

Having a good knowledge of OWASP Top 10, SANS Secure programming, Security Engineering

principles, Application Vulnerabilities & DevOps.

Knowledge of underlying infrastructure security controls for applications.

Prior experience in programming languages (e.g. Ruby, Java, Swift, JavaScript) and

development tools (e.g., Jenkins)

Develop, educate and train developers on secure development guidelines.

Ability to work in a self-directed environment that is highly collaborative and cross functional

Work closely with Dev, QA, Infra teams to analyse, diagnose and resolve security flaws.

Understanding AWS infrastructure and security.

Ability to provide guidance and drive security for new development.