SDE 1 / SDE 2 - DevSecOps

Fynd is India’s largest omnichannel platform and multi-platform tech company with expertise in retail tech and products in AI, ML, big data ops, gaming+crypto, image editing and learning space.

Founded in 2012 by 3 IIT Bombay alumni: Farooq Adam, Harsh Shah and Sreeraman MG.

We are headquartered in Mumbai and are a company of more than 750 people. Fynd has 1000+ brands under management, more than 10k stores and servicing 23k + pin codes.

Everybody these days is making products, everyone is hiring technology ninjas! We aren’t looking for ninjas, samurais or warriors, we are looking for YOU:

* If you know the difference between worKING and work-eh-ing

* You know when to stop, how to unwind and take a breakk!

* Unafraid to ask for help & unashamed to ask again

* If you are good at what you do & acknowledge when you mess up (We all mess up some time)

* You learn, execute, learn again and talk about the insights you gained

Then YOU are the chosen one that we are looking for….

We're looking for an SDE I/ SDE II- DevSecOps to join our Regrowth Engineering Team. The team builds products for 10M+ Fynd users and internal teams. Our team consists of generalist engineers who work on building modern websites (SPA & Isomorphic), mobile apps for Android & iOS, REST APIs and servers, internal tools, and infrastructure for all our users.

What will you do at Fynd?

• Build a Culture around Security Engineering at Fynd
• Ensure that a healthy security posture is maintained by continuously assessing/monitoring perimeter as well as internal security posture.
• Identify, integrate, monitor, and improve InfoSec controls by understanding business processes.
• Drive a DevSecOps culture in the organization by implementing shift left security culture.
• Conduct security reviews, auditing, penetration testing, risk assessments, vulnerability assessments, threat modeling.
• Install, configure, manage, and maintain mission-critical enterprise applications such as AV, patching, SIEM, DLP, log management and other technical controls. Troubleshoot security system and related issues
• Improve Cloud, Application ,Kafka, Database security posture and Kubernetes security using CI/CD
• Understand by regular gap assessment, Provide support in detection and mitigation of cyber security vulnerability and incidents for Cloud
• Run security automation tools for periodic scans - SAST, DAST, Infrastructure scanning, Compliance check
• Adhere to OWASP guidelines and bring the OWASP maturity model at organisation level.
• Strong understanding of network concepts including TCP/IP, HTTP and TLS, DDoS detection/prevention, and network and host anomaly detection through both automated (NIDS/HIDS) and manual means.
• A good knack for automating infrastructure security as much as possible

Some specific requirements

• Need to have a professional experience of at least 3-4 years acquired in monitoring and improving DevSec Ops tools and processes
• Extensive knowledge in assurance tools such as BurpSuite, WebInspect, Fortify, OWASP ZAP, Sonarqube, Open source automation tools and their integrations into CI/CD cycles.
• Understanding of Zero Trust policy and its implementation.
• Identify security weakness across multiple programming languages like Python, Node JS, Java, Go, Javascript, HTML etc
• Participate in incident handling and other related duties to support the information security function.
• Ability to drive security automation and DevSecOps within engineering life cycle, as well as vulnerability/bug remediation
• Ability to perform security assessments for web applications and mobile apps - Android/iOS
• Proficient in any one programming language (e.g. Python, JavaScript, etc.) and Git workflows.
• Good to have audit experience across compliance certifications like ISO 27001/ISMS/PCI DSS / SoC 2
• Experience in Kubernetes Infra, Cloud deployment technologies - AWS, Azure

What do we offer?

Growth

* We are a company that has grown more than 2x in people, 3x in products and 4x in-office presence, in the past 1 year alone. We are looking at new product lines, international markets and brilliant people to grow even further.

* We teach, groom and nurture our people to become leaders. You get to grow with a company that is growing exponentially.

* Flex University: We help you upskill by organizing in-house courses on important subjects

* Learning Wallet: You can also do an external course to upskill and grow, we reimburse it for you.

Other Perks

* A lucrative Retention Bonus

* ESOP for people who go above and beyond

* Best in the market salary and appraisal

Culture

Our Glassdoor rating of 4.5 conveys what our people already know, we consistently work towards a better us.

* We listen to people: Make big + small changes wherever required.

* Go on Workcations all year long.

* Host weekly, quarterly and annual events/parties.

Wellness

* Mediclaim policy for you + parents + spouse + kids

* Experienced therapist for better mental health

* Coaching to improve productivity & work-life balance 

Flexible Working

We follow simple math for a great work-life equation! Minimum 3 days of work from office plus 2 days from home means a relaxed yet productive work week!