Develop tools and scripts to enhance security visibility across AI model pipelines, APIs, and data integrations
Integrate security controls into CI/CD workflows, including SAST, DAST, SCA, and IaC scanning
Lead periodic VAPT (Vulnerability Assessment & Penetration Testing) for web apps, mobile apps, agentic AI platforms, and connected services
Cloud & Infrastructure Security
Secure AWS environments using native and third-party tooling
Build and maintain IaC security baselines with automated configuration drift detection
Configure and manage WAF rules for DDoS mitigation and bot protection
Enforce secrets management, IAM policies, and container security best practices across production workloads
AI & Data Security
Collaborate with engineering teams to remediate vulnerabilities and enforce secure SDLC practices
Conduct internal security training and phishing simulations
Apply AI model security and data privacy principles to protect sensitive data flows
Compliance & Governance
Contribute to the implementation and maintenance of ISO 27001, SOC 2, DPDPA, and PCI DSS controls
Requirements
6+ years of experience in product security or a related field
Proven hands-on experience with security assessments, threat modeling, code reviews, and penetration testing
Strong understanding of secure coding practices and secure SDLC principles
Proficiency in scripting languages such as Python, Bash, or similar
Working knowledge of OWASP, static/dynamic analysis tools, and common security frameworks (CWE, CVSS)
Excellent communication and collaboration skills, with the ability to influence cross-functional teams
Strong analytical and problem-solving abilities
Ability to manage multiple projects and prioritize effectively
A genuine passion for building secure products and fostering a security-first culture
Experience with AWS infrastructure security
Hands-on experience securing PII and sensitive content
Understanding of compliance frameworks such as RBI, NPCI, SOC 2, DPDPA, and ISO 27001
Nice to Have
Experience in a fintech or startup environment
Knowledge of red teaming methodologies
Certifications such as OSCP, AWS/GCP Security Specialty, CEH, CISSP, or CKS
Exposure to multi-cloud environments including AWS and GCP
Why Jupiter
Ownership mindset — We value people who see projects through to completion
Meaningful problems — We tackle real challenges and craft delightful customer experiences
Healthy debate — We value consent over consensus, and reward ownership and commitment
Continuous growth — We constantly raise the bar; if you crave learning, this is the place