Engineer 2 - Product Security

As a Senior Product Security Engineer at slice, you will play a key role in securing our mobile-first

fintech products and APIs. You will work closely with engineering and product teams to embed security into the entire product lifecycle and ensure our systems are resilient against real-world attacks.You will be responsible for identifying risks, driving secure design practices, and building scalable security solutions across applications and services. The ideal candidate is a self-driven security professional who can operate independently, influence stakeholders, and thrive in a fast-paced environment.

• Conduct security assessments across mobile (Android/iOS), web applications, and APIs

• Perform threat modeling and security architecture reviews for new and existing features

• Identify and exploit business logic vulnerabilities, especially in fintech/payment flows

• Perform secure code reviews across services (Java, Go, Node, Python)

• Drive secure design practices in microservices-based architecture

• Build and improve security automation in CI/CD pipelines

• Perform mobile security testing, including reverse engineering and runtime analysis

• Conduct CVE/zero-day impact analysis and drive remediation

• Collaborate with developers to triage and fix vulnerabilities

• Handle bug bounty submissions and external vulnerability reports

• Monitor and triage alerts from security tools (SIEM, CSPM, DLP, etc.)

• Provide security advisory and consultation to product and engineering teams

• Support compliance requirements (PCI-DSS, ISO 27001, RBI guidelines)

• 5–7 years of experience in Product Security / Application Security

• Strong expertise in Mobile Security (Android/iOS), API Security, and Web Security covering

  OWASP Top 10 & Mobile Top 10

• Hands-on experience with tools like Burp-Suite, Frida, Jadx, Apktool, Ghidra and other

  application security tools.

• Strong understanding of:

  1. Rooting (Android) and Jailbreaking (iOS) and their security implications

  2. Bypassing root/jailbreak detection mechanisms

  3. SSL pinning bypass techniques

  4. Secure storage mechanisms (Android Keystore / iOS Keychain)

  5. Runtime attacks and dynamic analysis

• Experience with threat modeling and secure architecture reviews

• Hands-on experience in secure code review

• Understanding of microservices security architecture

• Experience in security automation and DevSecOps practices

• Experience with AWS cloud security and misconfigurations

• Basic knowledge of Kubernetes and container security

• Understanding of network, endpoint, and infra security concepts

• Experience in CVE analysis and zero-day impact assessment

• Exposure to AI/ML security risks and architecture reviews

• Good to have experience in fintech or banking domain
  

  Soft Skills
  

• Strong communication and stakeholder management

• Ability to work independently with high ownership

• Strong problem-solving and analytical thinking

• Collaborative mindset with developer-first approac

Life so good, you’d think we’re kidding:  

• Competitive salaries. Period.  

• An extensive medical insurance that looks out for our employees & their dependents. We’ll love you and take care of you, our promise.  

• Flexible working hours. Just don’t call us at 3AM, we like our sleep schedule.  

• Tailored vacation & leave policies so that you enjoy every important moment in your life.     

• A reward system that celebrates hard work and milestones throughout the year. Expect a gift coming your way anytime you kill it here.   

• Learning and upskilling opportunities. Seriously, not kidding.  

• Good food, games, and a cool office to make you feel like home. An environment so good, you’ll forget the term “colleagues can’t be your friends”. 

We believe in equality. Period. 

At slice, we are committed to building a diverse and talented workforce. We never discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by the applicable law. 

We consider all qualified job-seekers with criminal histories in a manner  consistent with the applicable law. Additionally, we are committed to providing reasonable accommodations to qualified individuals with physical or mental disabilities in order to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. 

Come join our crew!   

slice

A new bank for a new India

slice’s purpose is to make the world better at using money and time, with a major focus on building the best consumer experience for your money. We’ve all felt how slow, confusing, and complicated banking can be. So, we’re reimagining it. We’re building every product from scratch to be fast, transparent, and feel good, because we believe that the best products transcend demographics, like how great music touches most of us.

Our cornerstone products and services: slice savings account, slice UPI credit card, slice UPI, and slice business are designed to be simple, rewarding, and completely in your control. At slice, you’ll get to build things you’d use yourself and shape the future of banking in India. We tailor our working experience with the belief that the present moment is the only real thing in life. And we have harmony in the present the most when we feel happy and successful together.

We’re backed by some of the world’s leading investors, including Tiger Global, Insight Partners, Advent International, Blume Ventures, and Gunosy Capital.