Product Security Engineer

PhonePe is the leading payments app in India and we are looking for people who are experts in Application Security. You will be responsible for security assessments and penetration testing of application and merchant integrations as well as security research and development of security tools, processes and testing methodologies.

Desired Qualifications and Skills set-

The candidate must have

• Be a security subject matter expert and respond to any internal security engineering questions/requests.
• Be an expert on 3 party integrations and payment integrations. Understand basics of network security.
• The ability to think and test applications holistically covering all the aspects including edgecases and possible issues with 3rd party integrations.
• Ability to understand tech deeply and work with respective tech teams to define functional security design and best practices framework for security.
• Correctly balance security risk and product advancement
• Perform penetration testing on our internal and external applications
• Excellent communication skills to proactively communicate with stakeholders to keep them up to speed on any issues.
• A sharp focus on automating repeatable tasks and reducing operational overheads
• Ability to manage multiple projects.
• Natural inclination to attention to details
• Knowledge of OWASP top 10/mobile, PRD Review, Threat Modelling, Read Teaming, Source Code review, Devsecops, Cloud Security, Fraud and Business logic related issues, Data Security.
• OSCP, bug bounty experience is a plus