Product Security Engineer - II

About Groww:
We are a passionate group of people focused on making financial services accessible to every
Indian through a multi-product platform. Each day, we help millions of customers take charge of
their financial journey. Customer obsession is in our DNA. Every product, every design, every
algorithm down to the tiniest detail is executed keeping the customers’ needs and convenience
in mind. Our people are our greatest strength. Everyone at Groww is driven by ownership,
customer-centricity, integrity and the passion to constantly challenge the status quo.
Are you as passionate about defying conventions and creating something extraordinary as we
are? Let’s chat.
Our Vision:
Every individual deserves the knowledge, tools, and confidence to make informed financial
decisions. At Groww, we are making sure every Indian feels empowered to do so through a
cutting-edge multi-product platform offering a variety of financial services. Our long-term vision
is to become the trusted financial partner for millions of Indians.
Our Values:
Our culture enables us to be what we are — India’s fastest-growing financial services company.
It fosters an environment where collaboration, transparency, and open communication take
center-stage and hierarchies fade away. There is space for every individual to be themselves
and feel motivated to bring their best to the table, as well as craft a promising career for
themselves.
The values that form our foundation are:
Radical customer centricity
Ownership-driven culture
Keeping everything simple
Long-term thinking
Complete transparency
What you will do:
Assess applications and products for security vulnerabilities, design flaws and interact with project teams to understand the security requirements
Performing Web application security testing, Mobile(Android/iOS) application security testing and Secure code review
Conduct Product Requirement reviews, Threat modelling, Static Code Reviews and cloud security assessments
Evaluate security vulnerabilities, think out of the box in building attack scenarios and prioritise remediation efforts
Evaluate and improve application security tools and processes
Research latest security best practices, staying current on new vulnerabilities and threats
What We Are Looking For:
Proficient in OWASP Top 10/SANS TOP 25, PRD Review, Threat Modelling, Red Teaming, Source Code review
Inclination towards learning multiple areas of security and building competency to deliver a wide spectrum of security like Cloud security, devSecOps, Data security etc.
Ability to understand tech deeply and work with respective tech teams to define functional security design and best practices framework for security
A sharp focus on automating repeatable tasks and reducing operational overheads
Excellent communication skills to proactively communicate with stakeholders to keep them up to speed on any issues.
Contributions to open source projects, GSoC etc is a plus
Certifications are not mandatory but skills are.

Work arrangement
No