Drip Capital
https://dripcapital.comAbout
Company social profiles
Jobs at Drip Capital
The recruiter has not been active on this job recently. You may apply but please expect a delayed response.
Amazon Web Services (AWS)About Drip Capital & Tech Team
The engineering team at Drip Capital is responsible for building and maintaining the online global trade financing platform that supports the interactions between buyers, sellers, financing partners, insurance agents, global retail partners, trade agents, shipping & transportation companies, supply chain and warehousing companies worldwide.
Our primary goal is to ensure that customers are provided time-critical capital and at the same time balance requirements related to risk, fraud management, and compliance. The services are accessed by customers worldwide and hence the engineering systems need to be policy-driven, easily reconfigurable, and able to handle multiple regional languages. We use machine learning for risk classifications/predictions, intelligent document parsing subsystems, robotic process automation, REST APIs to connect our microservices, and a cloud-based data lake and warehouse for data storage and analysis.
Our team comprises talent from top-tier institutions including Wharton, Stanford, and IITs with years of experience at companies like Google, Amazon, Standard Chartered, Blackrock, and Yahoo. We are backed by leading Silicon Valley investors - Sequoia, Wing, Accel, and Y Combinator. We are a global company headquartered in Silicon Valley along with offices in India and Mexico.
Your Role
As an AppSec Engineer in Drip Capital’s engineering team, you will have the opportunity to take ownership of :
- Contribute to and improve secure SDLC practice
- Design architecture, methods, and controls required to meet security, compliance, and audit requirements.
- Designing and implementing cloud and network security solutions.
- Do comprehensive threat modelling for our applications and infrastructure in an Agile flow
- Perform secure code review and security assessments of web, android and iOS applications, and cloud infrastructure (infrastructure as code).
- Proactively identify vulnerabilities across our platform and work with developers in fixing them.
- Automate and simplify security, as “Complexity is the enemy of Security”.
- Handle Vulnerability Management and Patch Management processes.
- Participate in the investigation related to Privacy/Security incidents and response activities.
- Work with DevOps to implement the security tools and automation of the security tasks.
- Mentor other engineers and evangelize security practices through cross-functional work with DevOps and engineering teams.
- Testing the deployed security solutions to make sure they function as planned.
Our Checklist
- A minimum of 4 years of experience as an AppSec Engineer
- Hands-on experience in secure design and architecture review of backend services, payments systems like payment gateways.
- Hands-on experience in secure code review and automation of common security workflows.
- Hands-on experience and a proven record of securing one or more of the cloud platforms: Azure, GCP, AWS and Hosted Cloud Solutions.
- Good understanding of OWASP and SANS testing methodologies.
- Good understanding of software security weaknesses and vulnerabilities.
- Good knowledge in securing architecture of web, mobile applications and cloud infrastructure.
- Ability to contribute as an individual and as part of a team
- Working knowledge of any scripting language; Python or Go preferred
- Experience in writing custom tools/scanners/extenders is a plus
- Red teaming experience is a plus
If you love to explore the security aspects of a distributed system that makes decisions related to global trade finance, let's talk!
Similar companies
About the company
We are a technology company with a proven track record of partnering with organizations to deliver innovative mobile and cloud solutions & products. We believe that cloud and mobility are the means to deliver solutions to tomorrow’s challenges. Over the last 10 years, we have completed over 200 projects, and many of those have reached the top of the AppStores. We have worked across a number of categories including Fintech, Social, Retail, Enterprise, Lifestyle, Ticketing, Sports, Healthcare, Entertainment and many more.
We have worked with both Fortune 500 companies and innovative startups, and delivered successful products. We have a 40+ people team which, includes UI/UX designers, the best breed of engineers for iOS and Android, Full Stack Developers and Innovators. Other than design and development, Byteridge helps companies understand and define the product that needs to be built. This includes working with the stakeholders to understand the business, recognizing areas of improvement and aligning the project scope with the customers problems.
Jobs
13
About the company
We are Aanet Talent Global Solutions (ATGS), a leading provider of Talent, HR, and Influencer Marketing solutions. We partner with businesses as strategic Talent Advisors, enabling sustainable growth and operational excellence.
Over the years, we have successfully supported start-ups, mid-sized organizations, and multinational corporations in achieving their unique business objectives through our comprehensive consulting services. As end-to-end talent solution providers, we design customized success frameworks tailored to each organization’s specific needs. Our approach emphasizes long-term partnerships, measurable outcomes, and timely delivery.
Jobs
34
About the company
Business is about solving problems for the customer. We solve technology problems for the business. Your big, ambitious plans require a strong technology backbone. Using a skilful combination of creativity, code, and commitment, we help solve the problems of scalability, dexterity, and agility for your business, allowing you to do what you do best - create continuous value for your customers.
We take our quality of delivery and security as the highest priority, which is backed by ISO/IEC 27001:2013 (ISMS) certification for international security, reliability, quality, data protection, and trust standards. We have helped few of our clients to architect and comply with their platform/application for SOC 2 standards.
Jobs
11
About the company
We’ve achieved 300% growth in the cybersecurity field. We’ve partnered with the most impactful organisations - whether it is the largest cybersecurity company or the fastest growing unicorn. We're building an amazing place to work and we invite you to join us.
Engineering Centric Culture
At Metron, we strive to maintain and cultivate a developer-centric culture. Here’s what this means in action:
Meaningful and ever-evolving work
We’ve built integrations and custom solutions for 200+ security platforms and keep adding more to the list. You will be constantly learning about new platforms, acquiring new skills, and being exposed to cutting-edge security technology and other tools.
Work directly with clients and end-users
We encourage our developers to have a client-facing approach. At Metron, you will be able to demonstrate and discuss your code with the people who will be using it on a regular basis.
A balanced workspace
Everyone has a personal life outside of the office. We do not expect you to work weekends or overtime (and actively encourage you not to do so). We also aim to provide you with all the required perks and benefits to keep you in good health and spirits.
A level hierarchy
There are only 2 roles in the organisation - Development and QA. Every employee will either be writing code or testing for quality. We don’t believe in helicopter managers who hover above you and do not understand your work.
Hybrid work mode
Like to work at the office? We can accommodate you. Prefer to work from home? No problem! Need a combination of both? Whatever model works for you, works for us.
Jobs
12
About the company
Jobs
24
About the company
Jobs
39
About the company
Jobs
16
About the company
Jobs
9
About the company
Jobs
1
