Senior Associate Cryptography Researcher

Posted Yesterday
Be an Early Applicant
Hyderabad, Telangana, IND
In-Office
Senior level
Fintech • Payments • Financial Services
The Role
Designs and implements cryptographic solutions, Java SDKs, PKI components, TLS integrations, and HSM/key-management workflows. Conducts threat modeling, security reviews, testing, remediation, documentation, and compliance support. Requires deep knowledge of symmetric and asymmetric cryptography, certificates, secure protocols, Java security libraries, and secure coding. The role also evaluates post-quantum cryptography and supports SDK integration teams.
Summary Generated by Built In
Key Responsibilities:
• Understand system architecture and data flows, and identify where encryption, signing, authentication, and key management are needed.
• Design and implement cryptographic solutions: encryption, digital signatures, hashing, key derivation, secure key storage, and secure transport.
• Build and maintain Java SDKs and libraries with clean APIs, versioning, documentation, and backward compatibility.
• Implement and troubleshoot PKI components: X.509 certificates, chain validation, CSRs, CRL/OCSP, and TLS/mTLS configuration.
• Integrate with HSMs and key management systems (PKCS#11), and design key lifecycle processes: generation, rotation, backup, and destruction.
• Take part in threat modelling and design reviews, and recommend algorithms, key sizes, and parameters with clear reasoning.
• Remediate findings from code reviews, static and dynamic analysis, penetration tests, and audits.
• Write unit, integration, and negative tests, including known-answer tests with standard test vectors.
• Support teams that integrate the SDK, and produce technical documentation and compliance evidence.
• Follow developments in post-quantum cryptography (ML-KEM, ML-DSA, hybrid key exchange or Newer PQC algorithm) and help assess their impact on our systems.

Required Skills Cryptography (must be able to explain the reasoning, not only the usage)
• Symmetric encryption (AES; GCM, CBC, CTR modes) and the consequences of nonce/IV misuse.
• Asymmetric cryptography: RSA (OAEP, PSS), ECC (ECDSA, ECDH, Ed25519, X25519).
• Hashing, HMAC, key derivation (HKDF, PBKDF2), and secure random generation.
• Authenticated encryption and key management principles.

PKI and protocols
• X.509, certificate lifecycle, trust chain validation.
• TLS 1.2/1.3 and mTLS: handshake, cipher suites, session resumption.
• JWT/JWS/JWE, OAuth2, and signature formats such as CMS/PKCS#7.

Development
• Strong Java (Java 8 or later): collections, concurrency, exception handling, JVM basics.
• Hands-on experience with JCA/JCE and Bouncy Castle. Use of vetted libraries only, no custom algorithms.
• Experience building reusable libraries or SDKs with Maven or Gradle.
• Git, CI/CD, JUnit, and Mockito.

Security engineering
• Secure coding practices (OWASP Top 10): constant-time comparison, safe error handling, no secrets in logs.
• Understanding of threat modelling and trust boundaries.

Education: B.E./B.Tech/MCA or equivalent in Computer Science, IT, Electronics, or a related field.

Good to Have
• Android development: Android Keystore, secure storage, AAR packaging.
• HSM experience (PKCS#11) and key management systems.
• Experience in payments, banking, or fintech security (PCI DSS, RBI guidelines, ISO 27001).
• Knowledge of TLS stacks and gateways (OpenSSL, Tomcat, Bouncy Castle JSSE).
• Familiarity with SAST/DAST tools, Kotlin, Spring Boot, or Docker.
• Security certifications or open-source contributions.

Skills Required

  • B.E., B.Tech, MCA, or equivalent degree in Computer Science, IT, Electronics, or a related field
  • Strong Java 8 or later development skills, including collections, concurrency, exception handling, and JVM fundamentals
  • Deep knowledge of symmetric cryptography, including AES, GCM, CBC, CTR, and nonce or IV misuse consequences
  • Knowledge of RSA OAEP/PSS, ECC, ECDSA, ECDH, Ed25519, and X25519
  • Knowledge of hashing, HMAC, HKDF, PBKDF2, secure random generation, authenticated encryption, and key management
  • Knowledge of X.509, certificate lifecycle management, and trust-chain validation
  • Knowledge of TLS 1.2/1.3, mTLS, handshakes, cipher suites, and session resumption
  • Knowledge of JWT, JWS, JWE, OAuth2, CMS, and PKCS#7 signature formats
  • Hands-on experience with JCA/JCE and Bouncy Castle using vetted cryptographic libraries
  • Experience building reusable Java libraries or SDKs with Maven or Gradle
  • Experience with Git, CI/CD, JUnit, and Mockito
  • Understanding of secure coding practices, OWASP Top 10, constant-time comparison, safe error handling, and secrets management
  • Understanding of threat modeling and trust boundaries
  • Android development experience with Android Keystore, secure storage, and AAR packaging
  • HSM experience with PKCS#11 and key management systems
  • Payments, banking, or fintech security experience, including PCI DSS, RBI guidelines, or ISO 27001
  • Knowledge of OpenSSL, Tomcat, or Bouncy Castle JSSE
  • Familiarity with SAST/DAST tools, Kotlin, Spring Boot, or Docker
  • Security certifications or open-source contributions
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Mumbai, Maharashtra
2,124 Employees
Year Founded: 2005

What We Do

NPCI is an umbrella organisation for all retail payment systems in India. It was set up with the support & guidance from Reserve Bank of India (RBI) & Indian Banks Association (IBA). A registered company under Section 8 of the Companies Act, 2013. Watch the NPCI Corporate AV - https://youtu.be/RGl9YQ6CB20 Products & Services Unified Payments Interface Unique payment solution which empowers a recipient to initiate the payment request from a smartphone. It facilitates 'virtual payment address'​ as a payment identifier for sending & collecting money & works on single click 2 factor authentication. Immediate Payment Service A 24X7, real time, cost effective, independent channel, retail payment service, introduced by NPCI, empowering customers to transfer money instantly with banks & RBI authorised PPIs across India. RuPay Robust card scheme designed to offer payment products with superior features & processes specifically designed to cater to diverse consumer needs. *99# USSD based mobile banking platform that makes banking services accessible to all the bank account holders on their mobile phones. National Automated Clearing House Centralised payment system developed with an aim to consolidate multiple ECS systems running across the country & provide a framework for the removal of local barriers/inhibitors. Aadhaar Enabled Payment System Bank led model which allows online financial inclusion transactions at micro-ATMs through the business correspondent of any bank using the Aadhaar authentication. e-KYC Electronic way of conducting authentic & real time KYC of a customer using Aadhaar authentication. Cheque Truncation System Electronic image of the cheque is transmitted to the drawee bank by the clearing house, along with relevant information. National Financial Switch Facilitates routing of ATM transactions through inter-connectivity between its member institutions thereby enabling the citizens of the country to utilise any ATM of a connected entity

Similar Jobs

Wells Fargo Logo Wells Fargo

Operations Manager

Fintech • Financial Services
Hybrid
Hyderabad, Telangana, IND
205000 Employees
Hybrid
Hyderabad, Telangana, IND
205000 Employees

Wells Fargo Logo Wells Fargo

Data Management Analyst

Fintech • Financial Services
Hybrid
Hyderabad, Telangana, IND
205000 Employees

Wells Fargo Logo Wells Fargo

Operations Associate

Fintech • Financial Services
Hybrid
Hyderabad, Telangana, IND
205000 Employees

Similar Companies Hiring

Hanover Park Thumbnail
Artificial Intelligence • Fintech • Software • Financial Services
New York, New York
42 Employees
Kepler  Thumbnail
Artificial Intelligence • Fintech • Software
New York, New York
9 Employees
Onshore Thumbnail
Artificial Intelligence • Fintech • Software • Financial Services
New York, New York
60 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account