Security Engineering

Upstox is one of India's leading Fin-Tech companies with a mission to simplify trading & investing to make it easily accessible to the masses. From new investors to seasoned traders, we aim to enable everyone to invest across multiple categories with our state-of-the-art trade & investment platform and commission-free pricing. We offer numerous asset categories to invest in, like Stocks, Digital Gold, IPOs, Mutual Funds, and more.

By focusing on our customers’ needs and equipping them with personalized yet powerful tools, we witnessed a steep growth of 800% in our customer base from 25 Thousand in 2017 to 2 Lakh in 2019. With 1500% growth in 2020, currently, over 4 million customers trust us with their investment decisions, thus setting us on the course to become an industry leader in the country. 

The company was founded in 2009 by Ravi Kumar and Shrinivas Viswanath, and in 2016 Kavitha Subramanian joined as the third co-founder. Backed by Ratan Tata, we raised $4 million in Series A funding (2016) led by Kalaari Capital. In 2019, US-based investment firm Tiger Global Management invested $25 million in a Series B funding round.

Visit our Linkedin page to learn more about us.

-Implement of new-age security solutions to secure on-prem and cloud IT services

-Monitor network activity to identify issues early and take proactive steps

-Implement, configure and operate security technologies like NGFW, EDR, Web & eMail Content Filtering, DLP, CASB, Cloud Firewall, WAF, etc.

-Ensure implementation of security best practices for all security technologies used by the cyber security team.

-Act on reported malware threats and security incidents.

-Participate in security Risk assessments and audits.

-Onboarding of security logs to SIEM.

-Monitor activities in the network, cloud applications and endpoint systems to identify issues at early stages and take security measures proactively.

-Understand vulnerabilities, threats & attack surface, and contribute in strategic decision making.

-Drive various cyber security initiatives within the organisation.

-Ensure upkeep of security technologies and tools (upgrades and enhancements, capacity monitoring, configuration backups, service availability monitoring, etc.)

-Evaluate new technologies.

-Draft policies and guidelines.

-5+ years of experience in the security domain

-Well versed with security technologies like, Firewall, VPN, EDR, DLP, CASB, WAF, Antispam, Web proxy, Content filtering, Sandbox, Disk Encryption, etc.

-Knowledge on incident handling and remediation

-Well versed with vulnerability scanning tools and techniques

-Knowledge on writing shell, batch, ansible scripts

-Knowledge and experience in AWS security tools

-Familiarity with security frameworks NIST - Cybersecurity framework, ISO 2700, and risk management methodologies

-Knowledge and experience in hardening and patch management activities

-Familiarity with public key infrastructure (PKI) and cryptographic protocols (e.g. SSL/ TLS)

-Analytical mind with excellent problem-solving ability

-Enthusiastic and eager to learn more about cyber security

-Team player with Good communication, organizational, and interpersonal skills

-Decision-making skills