
About the role:
We are looking for a skilled and driven Security Engineer to join our growing security team. This role requires a hands-on professional who can evaluate and strengthen the security posture of our
applications and infrastructure across Web, Android, iOS, APIs, and cloud-native environments.
The ideal candidate will also lead technical triage from our bug bounty program, integrate security into the DevOps lifecycle, and contribute to building a security-first engineering culture.
Required Skills & Experience:
● 3 to 6 years of solid hands-on experience in the VAPT domain
● Solid understanding of Web, Android, and iOS application security
● Experience with DevSecOps tools and integrating security into CI/CD
● Strong knowledge of cloud platforms (AWS/GCP/Azure) and their security models
● Familiarity with bug bounty programs and responsible disclosure practices
● Familiarity with tools like Burp Suite, MobSF, OWASP ZAP, Terraform, Checkov..etc
● Good knowledge of API security
● Scripting experience (Python, Bash, or similar) for automation tasks
Preferred Qualifications:
● OSCP, CEH, AWS Security Specialty, or similar certifications
● Experience working in a regulated environment (e.g., FinTech, InsurTech)
Responsibilities:
● Perform Security reviews, Vulnerability Assessments & Penetration Testing for Web,
Android, iOS, and API endpoints
● Perform Threat Modelling & anticipate potential attack vectors and improve security
architecture on complex or cross-functional components
● Identify and remediate OWASP Top 10 and mobile-specific vulnerabilities
● Conduct secure code reviews and red team assessments
● Integrate SAST, DAST, SCA, and secret scanning tools into CI/CD pipelines
● Automate security checks using tools like SonarQube, Snyk, Trivy, etc.
● Maintain and manage vulnerability scanning infrastructure
● Perform security assessments of AWS, Azure, and GCP environments, with an emphasis
on container security, particularly for Docker and Kubernetes.
● Implement guardrails for IAM, network segmentation, encryption, and cloud monitoring
● Contribute to infrastructure hardening for containers, Kubernetes, and virtual machines
● Triage bug bounty reports and coordinate remediation with engineering teams
● Act as the primary responder for external security disclosures
● Maintain documentation and metrics related to bug bounty and penetration testing
activities
● Collaborate with developers and architects to ensure secure design decisions
● Lead security design reviews for new features and products
● Provide actionable risk assessments and mitigation plans to stakeholders

About Flipr
About
Similar jobs
- - Strong architecture and design skills and keen business sense.
- - Strong core server-side technologies experience (Java), database design & performance tuning exposure.
- - Strong OO design skills, knowledge of frameworks such as Spring/ Spring Boot/ exposure to functional programming a plus.
- - Good knowledge of nodeJS/ noSQL a definite plus.
- - Good exposure to front end/UI skills (JS, HTML, Angular).
- - Good exposure to configuration management, testing, deployment.
- - Deep knowhow of data structures, algorithms.
- - Hands on development across technologies
- Degree in software development, computer science, or similar.
- Proficiency in Android, Java, Kotlin, MVC, MVVM.
- Prior experience as an android developer will be advantageous.
- Excellent coding and proofreading skills.
- Top-notch teamwork and communication skills.
- Ability to manage your workload with minimal supervision.
- Unwavering curiosity.
Location : Fort ,mumbai
Company Description
Nadcab Labs is a dynamic and innovative team of blockchain enthusiasts based in Prayagraj. Our primary focus is on developing cutting-edge applications for the decentralized world, including smart contracts, decentralized applications (Dapp's), and various DeFi (Decentralized Finance) products. We are dedicated to building robust and secure blockchain solutions.
Role & Responsibilities
- Be expert in the English language (grammar, vocabulary, and training methodology) and Business Communication.
- Have an error-free verbal fluency in speaking and writing English.
- Conduct daily training sessions with employees
- Include soft-skills and behavioral training (according to in-house observation of employees).
- Identify individual areas of improvement and help employees with them via periodical 1-on-1 meetings.
- Coordinate with management to better customize training modules and sessions.
- ·Create engaging training material.
- ·Promote a global communication culture with language and soft skills.
Qualifications
- 2Years of experience with English language and soft-skills training.
- Knowledge of the global standards of English and Business Communication.
- Research skills required to carry out diagnostic check-ups for communication hurdles within the firm.
- Periodical tests ready for the various stages of training.
Role and Responsibilities:
- To ensure success as a js developer, you should possess extensive knowledge of Node.Js based services like Express js, Multer.
- Candidate must be well aware of the JS concepts like promises, async-await, callback, fetch, and array methods like map, filter, reduce.
- Knowledge of GIT is a must.
- Must have sound knowledge of creating API through postman or similar tools, developing and maintaining all server-side network requests, ensuring optimal performance of the central database, collaborating with front-end developers on the integration of elements.
- Deep Understanding of mongo and MySQL.
- Working knowledge of Microservices.
- Good understanding of AWS services, Like Instance,S3, Route53, Elastic Bean Etc.
- Best writing code understanding.









