Security Lead

Kite’s mission is to empower everyone with flexible, secure, and accessible mobile finance. We’re building a new-age financial system from the ground up to bring about full financial inclusion in India – a platform that can rapidly scale to millions of users and billions of transactions worldwide. The confidentiality and security of our users’ information are central to building dependable, new-age platforms. We’re looking for an experienced Security Lead to design, implement, and evaluate security systems and policies at Kite. Here’s a glimpse into your work at Kite – you will: • Enhance security team accomplishments through planning and mentorship of team members • Determine security requirements through business strategy research and evaluation, vulnerability assessments, platform studies, and cost estimates • Implement, maintain, and enhance security systems through specification of intrusion detection methodologies; installation and calibration of equipment and software; provision of technical support; and preparation of security reports and other documentation • Drive end-to-end PCI and other required certifications It’s essential that you: • Have at least 6 years of hands-on leadership experience in developing solutions with a concentrated focus on performance, scalability, and reliability; and in performing network and application security penetration testing and/or threat assessments • Have at least 6 years of experience with commercial and open-source security technologies (e.g. malware prevention, DLP, IDS/IDP, cryptography, vulnerability scanning and penetration testing) and protocols and tools (e.g. SSH, SSL/TLS/ snort, port scanners, etc.) • Have an educational or equivalent background in Computer Science, • Information Security or a similar Engineering discipline • Maintain networks in security communities and participate in education opportunities to gather knowledge of emerging security standards and platforms We’d love it if you have experience in: • Identity management solutions (e.g. SailPoint, Centrify, CyberArk, Radiant Logic) • Application and infrastructure hardening techniques • IT networking and heterogeneous computing environments (network routing/switching, UNIX, Windows, virtualized infrastructures) Cloud computing, specifically AWS and Microsoft Azure environments • IT security related audits such as NIST 800-53, DoD 8500.2, or other relevant frameworks