Security Engineer, Air-Gapped Delivery

What you will do

• Maintain the signing and verification flow for container images, Helm charts and quarterly update bundles, including key rotation and revocation lists that work offline.
• Harden default deployments: non-root containers, read-only root filesystems, network policies with egress deny-all, and SBOMs for every release.
• Keep cryptographic operations on FIPS 140-2 validated modules and document the boundary for customer assessors.
• Answer customer security questionnaires and run architecture sessions with bank and government security teams.
• Support the SOC 2 Type II and ISO 27001 programs with control evidence from engineering systems.

What we are looking for

• 5+ years in product security, platform security or secure release engineering.
• Hands-on experience with code signing, PKI and container supply chain tooling (SBOM generation, image signing and verification).
• Strong Kubernetes security knowledge: RBAC, network policies, pod security standards.
• Clear written English for questionnaires and assessor evidence.

Nice to have

• Experience delivering software into regulated or classified environments.
• Familiarity with RBI, PCI DSS or FedRAMP-style control frameworks.
• Security certifications such as OSCP or CISSP.

Where you will work

This role is based at our Mumbai office, with flexible hours and up to two remote days a week. Office: 14 Floor-1 Plot-199, Maria Bhuvan P Dmello Rd, Mumbai G.P.O., Mumbai, Maharashtra 400001, India.