Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 232 days ago

Senior Security Engineer

Scrabble

Where
Bangalore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security EngineerScrabble · Bangalore

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Scrabble's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

15.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.4%1 day
  2. 6.5%3 days
  3. 15.1%7 days
This job: posted 232 days ago

The posting

Senior/Staff Security Engineer

Company Overview

We are a well-funded Series A startup operating in the Software as a Service (SaaS) domain, focused on developing a Governance, Risk, and Compliance (GRC) platform that helps enterprises automate compliance, manage risk, and scale security programs. Our culture fosters innovation and collaboration, with a strong emphasis on leveraging technology to provide cutting-edge solutions.

Job Summary

The Senior/Staff Security Engineer is primarily an engineering role, with a secondary focus on security. This position is responsible for owning product security across the Governance, Risk Management, and Compliance (GRC) platform, specifically securing AI agents that interact with enterprise compliance data. The role emphasizes high autonomy and ownership, requiring the candidate to build and define security practices and programs within the organization.

Responsibilities

  • Product & Application Security: Lead threat modeling for new features, particularly focusing on API design and data handling concerning AI agent workflows and multi-tenant isolation boundaries.
  • Security Code Reviews: Conduct security code reviews as part of the engineering lifecycle, integrating security as a core aspect of the development process.
  • Security Tooling: Build and maintain security tooling integrated into Continuous Integration/Continuous Deployment (CI/CD) processes including Static Application Security Testing (SAST), Software Composition Analysis (SCA), secret scanning, and vulnerability prioritization.
  • Vulnerability Management: Own the vulnerability management program end-to-end, including intake, triage, prioritization, service level agreements (SLAs), and tracking through remediation.
  • Bug Bounty Program: Run the bug bounty program encompassing scoping, validation, root cause analysis, bounty awards, and building hacker community relationships.
  • AI & Agentic System Security: Define security architecture for AI agents, including permission models, sandboxing, output validation, and data boundary enforcement.
  • Developer Security Culture: Build security standards and design patterns for engineering teams to facilitate independent security decisions while partnering with the GRC team to translate security work into audit evidence.

Qualifications

  • Experience: Minimum of 7 years in application security, product security, or software engineering with a strong emphasis on security.
  • Technical Skills: Strong proficiency in Python (or similar languages) and experience with cloud security (IAM, storage policy, secrets management, network controls, preferably AWS).
  • Threat Modeling: Experience applying threat modeling methodologies such as STRIDE or PASTA to production systems with genuine engineering input.
  • AI/ML Security: Familiarity with AI/ML security risks and practical experience with testing large language model (LLM) integrations or agentic systems.
  • CI/CD Integration: Proven experience integrating security tools (DAST, SAST, SCA) into CI/CD pipelines and making their output actionable for product engineers.
  • Development Mindset: A demonstrated ability to think like an attacker while building secure systems as an engineer.

Preferred Skills

  • Experience with bug bounty management or hunting.
  • Familiarity with compliance frameworks (SOC 2, ISO 27001) from an engineering perspective.
  • Contribution to public security work through blogs, talks, Write-ups, or open-source tooling demonstrating independent security thinking.

Experience

- 7+ years of relevant experience in application or product security with a deep focus on secure software engineering practices.

##

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Scrabble's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Scrabble's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Scrabble's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.