Systems Engineer

Role: Senior Security Engineer

Salary: INR 20-35L per annum

Performance Bonus: Up to 10% of the base salary

Location: Hulimavu, Bangalore, India

Experience: 5-8 years

About AbleCredit:

AbleCredit has built a foundational AI platform to help BFSI enterprises reduce OPEX by up to 70% by powering workflows for onboarding, claims, credit, and collections. Our GenAI model achieves over 95% accuracy in understanding Indian dialects and excels in financial analysis.

The company was founded in June 2023 by Utkarsh Apoorva (IIT Delhi, built Reshamandi, Guitarstreet, Edulabs); Harshad Saykhedkar (IITB, ex-AI Lead at Slack); and Ashwini Prabhu (IIML, co-founder of Mythiksha, ex-Product Head at Reshamandi, HandyTrain).

What Work You’ll Do

• Be the guardian of trust — every system you secure will protect millions of data interactions.
• Operate like a builder, not a gatekeeper — automate guardrails that make security invisible but ever-present.
• You’ll define what ‘secure by default’ means for a next-generation AI SaaS platform.
• Own the security posture of our cloud-native SaaS platform — design, implement, and enforce security controls across AWS, Linux, and Kubernetes (EKS) environments.
• Drive security compliance initiatives such as SOC 2 Type II, ISO 27001, and RBI-aligned frameworks — build systems that enforce, not just document, compliance.
• Architect defense-in-depth systems across EC2, S3, IAM, and VPC layers, ensuring secure configuration, least-privilege access, and continuous compliance.
• Build and automate security pipelines — integrate AWS Security Hub, GuardDuty, Inspector, WAF, and CloudTrail into continuous detection and response systems.
• Lead vulnerability management and incident readiness — identify, prioritize, and remediate vulnerabilities across the stack while ensuring traceable audit logs.
• Implement and maintain zero-trust and least-privilege access controls using AWS IAM, SSO, and modern secrets management tools like AWS SSM or Vault.
• Serve as a trusted advisor — train developers, review architecture, and proactively identify risks before they surface.

The Skills You Have..

• Deep hands-on experience with AWS security architecture — IAM, VPCs, EKS, EC2, S3, CloudTrail, Security Hub, WAF, GuardDuty, and Inspector.
• Strong background in Linux hardening, container security, and DevSecOps automation.
• Proficiency with infrastructure-as-code (Terraform, CloudFormation) and integrating security controls into provisioning.
• Knowledge of zero-trust frameworks, least-privilege IAM, and secrets management (Vault, SSM, KMS).
• Experience with SIEM and monitoring tools — configuring alerts, analyzing logs, and responding to incidents.
• Familiarity with compliance automation and continuous assurance — especially SOC 2, ISO 27001, or RBI frameworks.
• Understanding of secure software supply chains — dependency scanning, artifact signing, and policy enforcement in CI/CD.
• Ability to perform risk assessment, threat modeling, and architecture review collaboratively with engineering teams.

What You Should Have Done in the Past

• Secured cloud-native SaaS systems built entirely on AWS (EC2, EKS, S3, IAM, VPC).
• Led or contributed to SOC 2 Type II or ISO 27001 certification initiatives, ideally in a regulated industry such as FinTech.
• Designed secure CI/CD pipelines with integrated code scanning, image validation, and secrets rotation.
• (Bonus) Built internal security automation frameworks or tooling for continuous monitoring and compliance checks.

Skills Required:

- Good experience with programming language Python
- Strong experience in Docker.
- Good knowledge with any of the Cloud Platform like Azure.
- Must be comfortable working in a Linux environment.
- Must have exposure into IOT domain and its protocols ((Zigbee & BLE ,LoRa,Modbus)
- Must be a good team player.
- Strong Communication Skills

About us:

Arista Networks was founded to pioneer and deliver software driven cloud networking solutions for large datacenter storage and computing environments. Arista's award-winning platforms, ranging in Ethernet speeds from 10 to 400 gigabits per second, redefine scalability, agility and resilience. Arista has shipped more than 20 million cloud networking ports worldwide with CloudVision and EOS, an advanced network operating system. Committed to open standards, Arista is a founding member of the 25/50GbE consortium. Arista Networks products are available worldwide directly and through partners.

About this role:

• You will be working with the WiFi team at Arista, developing cutting edge and next generation WiFi solutions in a fast-paced environment. The WiFi team is responsible for the end to end development of the Cloud managed WiFi product portfolio of Arista. This specific position is for the WiFi AccessPoint team.
• As a core member of the AccessPoint team, you will be working closely with relevant teams to understand product requirements, design the solution, build the software and deliver it for final validation and customer deployment.
• You will also keep track of new and emerging technologies and their impact on Arista products, come up with new and innovative ideas to improve and differentiate the product and help Arista become a leading player in the Campus space.
• You will work closely with sales and support teams to push new solutions, understand customer needs and pain points and help resolve escalations.
• You will not be limited to a single aspect of the product, it will be broad encompassing many different aspects including but not limited to developing new Access Points, designing and implementing new features, tracking new technologies and working closely with the sales and customer teams.

Requirements:

• Strong engineering and Computer Science fundamentals

• Expected to have a strong background in software development and good understanding of systems and networking areas with the knowledge of the WiFi area as an added bonus.

• Minimum 4+ years of relevant experience

• Well versed with programming in one of C/C++ languages

• Experience working in a Linux environment, developing applications or Linux drivers

• Proven experience in any of the below:

1. Network device drivers, operating system internals, Kernels, compilers, SOC architecture
2. Experience in developing Wi-Fi features (802.11), WLAN MAC Protocol, system integration, evaluate various performance parameters.
3. User space development for connectivity related products (Wireless Lan access points/ controllers, networking equipment) in one or more of following areas:

• HostAPD, Portal, RADIUS, AAA, Identity and role management, Radsec

• Tunnels, Firewall, Iptables, Flow Classification, QoS, TLS, DTLS Preferred Skills

• Experience with Wi-Fi device drivers on Linux.

• Hands-on experience in working with one or more WIFI chipset platforms

• Good System Level understanding of the Wireless AP functionality

• Experience in developing Wi-Fi features, system integration, evaluate various performance parameters

Resources:

• Arista Cognitive WiFi : https://www.arista.com/en/products/cognitive-wifi https://youtu.be/cT1INdR-xHQ https://www.youtube.com/watch?v=olPkCOT3MdA
• Arista Cognitive WiFi Datasheet: https://www.arista.com/assets/data/pdf/Datasheets/CloudVision-Wifi-Datasheet.pdf
• Arista's Approach to Software with Ken Duda (CTO): https://youtu.be/TU8yNh5JCyw
• Additional information and resources can be found at https://www.arista.com/en/

• Support for Incident and Request management tasks as assigned.
• Administration and understanding of the following network services to support Incident and Request tasks as assigned:
• Palo Alto Firewalls
• LAN Routing and Switching
• Microsoft Azure Networking – Vnets, Express Route, Vnet Peering, VPN Gateways
• LAN to LAN VPN Tunnels
• Arista Network devices
• Work with Networking Monitoring tools such as one or more of the following: Solar Winds, Splunk, Prime, NetMRI, Nagios
• Work directly with telecom carriers and Network infrastructure maintenance providers as needed, such as Verizon, Tata, Bharti, and Cisco.
• Maximize network performance by monitoring performance, troubleshooting network problems and outages, scheduling upgrades, and collaborating with network architects on network optimization
• Supports routing and switching and work on BGP, OSPF protocols
• Support China retail store infrastructure and data center through on-call rotations

QUALIFICATIONS:

• Graduate or above
• 6-7 years experience in LAN/WAN Routing including 2 or more years of LAN/WAN Administration experience within a multi-platform technical environment.
• In-depth understanding of voice and/or data technologies and subject matter expert in at least one area.
• Cisco Certified or equivalent combination of knowledge and experience.
• Understanding on IPsec, VPNs, GRE, NAT/PAT over varied platforms
• Expert knowledge of all LAN switching technologies eg Spanning Tree, VLAN management, and VTP concepts on Cisco, Nexus, and Arista
• Good understanding of MPLS routing and OSPF routing