9+ Spring Security Jobs in Bangalore (Bengaluru) | Spring Security Job openings in Bangalore (Bengaluru)

SENIOR INFORMATION SECURITY ENGINEER (DEVSECOPS)

Key Skills: Software Development Life Cycle (SDLC), CI/CD

About Company: Consumer Internet / E-Commerce

Company Size: Mid-Sized

Experience Required: 6 - 10 years

Working Days: 5 days/week

Office Location: Bengaluru [Karnataka]

Review Criteria:

Mandatory:

• Strong DevSecOps profile
• Must have 5+ years of hands-on experience in Information Security, with a primary focus on cloud security across AWS, Azure, and GCP environments.
• Must have strong practical experience working with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, or Orca along with SIEM / IDS / IPS platforms
• Must have proven experience in securing Kubernetes and containerized environments including image security,runtime protection, RBAC, and network policies.
• Must have hands-on experience integrating security within CI/CD pipelines using tools such as Snyk, GitHub Advanced Security,or equivalent security scanning solutions.
• Must have solid understanding of core security domains including network security, encryption, identity and access management key management, and security governance including cloud-native security services like GuardDuty, Azure Security Center etc
• Must have practical experience with Application Security Testing tools including SAST, DAST, and SCA in real production environments
• Must have hands-on experience with security monitoring, incident response, alert investigation, root-cause analysis (RCA), and managing VAPT / penetration testing activities
• Must have experience securing infrastructure-as-code and cloud deployments using Terraform, CloudFormation, ARM, Docker, and Kubernetes
• B2B SaaS Product companies
• Must have working knowledge of globally recognized security frameworks and standards such as ISO 27001, NIST, and CIS with exposure to SOC2, GDPR, or HIPAA compliance environments

Preferred:

• Experience with DevSecOps automation, security-as-code, and policy-as-code implementations
• Exposure to threat intelligence platforms, cloud security monitoring, and proactive threat detection methodologies, including EDR / DLP or vulnerability management tools
• Must demonstrate strong ownership mindset, proactive security-first thinking, and ability to communicate risks in clear business language

Roles & Responsibilities:

We are looking for a Senior Information Security Engineer who can help protect our cloud infrastructure, applications, and data while enabling teams to move fast and build securely.

This role sits deep within our engineering ecosystem. You’ll embed security into how we design, build, deploy, and operate systems—working closely with Cloud, Platform, and Application Engineering teams. You’ll balance proactive security design with hands-on incident response, and help shape a strong, security-first culture across the organization.

If you enjoy solving real-world security problems, working close to systems and code, and influencing how teams build securely at scale, this role is for you.

What You’ll Do-

Cloud & Infrastructure Security:

• Design, implement, and operate cloud-native security controls across AWS, Azure, GCP, and Oracle.
• Strengthen IAM, network security, and cloud posture using services like GuardDuty, Azure Security Center and others.
• Partner with platform teams to secure VPCs, security groups, and cloud access patterns.

Application & DevSecOps Security:

• Embed security into the SDLC through threat modeling, secure code reviews, and security-by-design practices.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
• Secure infrastructure-as-code and containerized workloads using Terraform, CloudFormation, ARM, Docker, and Kubernetes.

Security Monitoring & Incident Response:

• Monitor security alerts and investigate potential threats across cloud and application layers.
• Lead or support incident response efforts, root-cause analysis, and corrective actions.
• Plan and execute VAPT and penetration testing engagements (internal and external), track remediation, and validate fixes.
• Conduct red teaming activities and tabletop exercises to test detection, response readiness, and cross-team coordination.
• Continuously improve detection, response, and testing maturity.

Security Tools & Platforms:

• Manage and optimize security tooling including firewalls, SIEM, EDR, DLP, IDS/IPS, CSPM, and vulnerability management platforms.
• Ensure tools are well-integrated, actionable, and aligned with operational needs.

Compliance, Governance & Awareness:

• Support compliance with industry standards and frameworks such as SOC2, HIPAA, ISO 27001, NIST, CIS, and GDPR.
• Promote secure engineering practices through training, documentation, and ongoing awareness programs.
• Act as a trusted security advisor to engineering and product teams.

Continuous Improvement:

• Stay ahead of emerging threats, cloud vulnerabilities, and evolving security best practices.
• Continuously raise the bar on a company's security posture through automation and process improvement.

Endpoint Security (Secondary Scope):

• Provide guidance on endpoint security tooling such as SentinelOne and Microsoft Defender when required.

Ideal Candidate:

• Strong hands-on experience in cloud security across AWS and Azure.
• Practical exposure to CSPM tools (e.g., Prisma Cloud, Wiz, Orca) and SIEM / IDS / IPS platforms.
• Experience securing containerized and Kubernetes-based environments.
• Familiarity with CI/CD security integrations (e.g., Snyk, GitHub Advanced Security, or similar).
• Solid understanding of network security, encryption, identity, and access management.
• Experience with application security testing tools (SAST, DAST, SCA).
• Working knowledge of security frameworks and standards such as ISO 27001, NIST, and CIS.
• Strong analytical, troubleshooting, and problem-solving skills.

Nice to Have:

• Experience with DevSecOps automation and security-as-code practices.
• Exposure to threat intelligence and cloud security monitoring solutions.
• Familiarity with incident response frameworks and forensic analysis.
• Security certifications such as CISSP, CISM, CCSP, or CompTIA Security+.

Perks, Benefits and Work Culture:

A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain the quality of content, interact and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the comprehensive benefits that company offers.

Job Title: Software Developer (7-10 Years Experience)

Job Summary: We are seeking an experienced Software Developer with 7-10 years of hands-on development expertise in designing, building, and maintaining enterprise level applications and scalable APIs. Key

Responsibilities:

• Design, develop, and maintain microservices based applications using the Spring framework.

• Build secure, scalable REST and SOAP web services.

• Implement API security protocols including OAuth, JWT, SSL/TLS, X.509 certificates, and SAML, mTLS.

• Develop and deploy applications by leveraging AWS services such as EC2, Lambda, API Gateway, SQS, S3, SNS.

• Work with Azure cloud services and OpenShift for deployment and orchestration.

• Integrate JMS/messaging systems and work with middleware technologies such as MQ.

• Utilize SQL and NoSQL databases, including MySQL, PostgreSQL, and DynamoDB.

• Work with Netflix Conductor or Zuul for orchestration and routing.

• Collaborate with cross functional teams to deliver robust solutions in an Agile setup.

Required Skills:

• Strong JAVA OOPS fundamentals.

• Strong proficiency in Spring Framework (Spring Boot, Spring Cloud, Spring Security).

• Solid experience in microservices architecture.

• Handson experience with AWS cloud and OpenShift ecosystem.

• Familiarity with Azure services.

• Strong understanding of API security mechanisms.

• Expertise in building RESTful APIs.

• Experience working with SQL/NoSQL databases.

• Should have worked on integration with AppDynamics or similar APM tools

• Strong analytical and problem-solving skills.

Good to have skills:

• SOAP web services and graphQL

• Experience with JMS, messaging middleware, and MQ.

Qualifications:

• Bachelor’s or Master's degree in computer science or related field.

• 7-10 years of experience in backend development or full Stack development roles. 

• 5+ years of software development experience in Java 8+ and Microservices.
• Experience in developing micro services. Experience in developing High Cohesion & Loosely Coupled Micro Services.
• Experienced in skills of requirement, analysis, design, develop, Java, springboot, microservices, rest api, AWS, lambda, EC2, Jenkins, design pattern, spring security, splunk, auth, docker, SOLID
• Hands on experience on Microservices Architecture.
• Should have excellent acumen in Data Structures, algorithms, problem-solving and Logical/Analytical skills. Thorough understanding of OOPS concepts, Design principles and implementation of different type of Design patterns.
• Experience with Multithreading, Concurrent Package and Concurrent APIs
• Basic understanding of Java Memory Management (JMM) including garbage collections concepts.
• Experience in RDBMS or NO SQL databases and writing SQL queries (Joins, group by, aggregate functions, etc.)
• Hands-on experience with Message Broker like Kafka/Rabbitmq or other. Hands-on experience in creating RESTful webservices and consuming web services. Hands-on experience with spring Cloud/Spring Boot.
• Hands-on experience with any of the logging frameworks (SLF4J/LogBack/Log4j)
• Experience of writing Junit test cases using Mockito / Powermock frameworks. Should have practical experience with Maven/Gradle and knowledge of version control systems like Git/SVN etc.
• Hands on experience on Cloud deployment/development like AWS/Azure/GCP.
• Good communication skills and ability to work with global teams to define and deliver on projects. Sound understanding/experience in software development process, test-driven development.

• Gender Neutral /Diversified Culture
• 51 Leaves annually
• Insurance covered for family
• Incentives, Bonus
• Permanent WFH Option
• Generous parental leave and new parent transition program
• Flexible work arrangements

• Leading the engineering team  and federated suites.
• Helping define Technical Roadmap and own the entire product delivery end to end.
• Working very closely with various business stakeholders to drive the execution of multiple business plans and technologies for the team.
• Improving, optimizing and identifying opportunities for efficient software development processes.
• Hiring, Developing and Retaining a strong team of engineers.

• 7-9 years of experience with Java development, Spring Boot. Minimum 5+ years of managing high performance development team(s).
• Strong knowledge of REST and micro services based design.
• Experience across the product development SDLC with solving customer problem approaches.
• Prior product engineering leadership in Identity and Access Management solutions is a big plus.

About Alore

Alore brings revenue velocity to businesses by being their dependable growth operating system.

For further information on what Alore can do for growing businesses, please visit http://alore.io">alore.io

Alore is based out of Singapore with an office at Bangalore.

Who should not apply for this job

• If you are looking for a 100% hike in your salary but can't commit to what value you will bring on the table
• If you never read books
• If you jump companies every 11-12 months
• If you are not comfortable working on Saturdays
• If you have less than 2 years of experience
• If you have more than 4 years of experience
• If you have never worked in a product-led company

CTC:

8.5-10.5 LPA based on experience and on performance in the interview round (70% Fixed - 30% Variable Incentive based on delivery schedule) (We do ZERO deductions since the salary will be paid from Singapore)

At this position you will:

• Get solid experience with high-load distributed architecture using REST and Kafka services.
• Work with automated CI/CD processes, AWS cloud, and VoIP.
• Implement and support microservices based on Spring MVC, Camel, MySQL, Mongo, and Kafka.

Requirement

• At least 1 year of experience with Java Core, Java EE, Spring Core, Spring Boot.
• Not more than 3 years of experience in Java Core, Java EE, Spring Core, Spring Boot.
• Deep understanding of SQL database technologies.
• Experience with Scrum / Agile methodology.
• Willingness to learn and explore new technologies.
• Git: merge, rebase, cherry-pick should be fluent.
• Good level of English B1 or higher.

It would be a nice bonus to have:

• Experience with distributed architecture.

• Hands-on experience with Kafka, MongoDB, and Apache Camel.

• Experience with cloud infrastructure (AWS, Google Cloud, Azure, Heroku, etc.).

• Experience with client-side development (we use Angular8 for website).

• A degree in computer science.