Security Engineer - II

About Kapiva

Kapiva (Series-C funded) is on a journey of transformation — from being one of India's leading modern Ayurvedic nutrition brands to becoming a health-tech company that leverages technology to drive better health outcomes for millions of people across India and internationally.

We believe the next wave of innovation in health will be driven by AI-first solutions — from personalized recommendations and intelligent coaching, to automated platforms that scale care and wellness delivery. At Kapiva, you'll be part of building this future.

Role Summary

We are looking for a Security Engineer (Level 2) with 2–4 years of experience to strengthen the security posture of Kapiva's Ecommerce and Health Tech platforms . As a Security Engineer, you will be responsible for securing applications, infrastructure, and data against potential threats. You will collaborate with engineering, DevOps, and product teams to implement secure coding practices, monitor for vulnerabilities, and ensure compliance with industry standards.

Key Responsibilities

• Perform application security reviews , threat modeling, and code analysis for new features.
• Conduct vulnerability assessments and penetration testing for web, mobile, and APIs.
• Collaborate with developers to implement secure coding practices and remediate vulnerabilities.
• Monitor and respond to security incidents using SIEM and alerting tools.
• Manage identity and access management (IAM) , secrets, and encryption systems.
• Support compliance initiatives (HIPAA / GDPR for Health Tech).
• Automate security testing in CI / CD pipelines (SAST, DAST, dependency scanning).
• Document and maintain security policies, procedures, and playbooks .
• Train engineering teams on security best practices .

Required Skills and Qualifications

Bonus Points

What We Offer

Skills Required

API Security, Vpns, Nessus, Firewalls, Encryption, Javascript, Sonarqube, Python, Aws, Cloud Security, Network Security, Bash, Security Groups, Burp Suite, DevSecOps, Application Security, Gcp, Iam, Owasp Top 10, Infrastructure Security