Overview

Keka is one of India's fastest-growing HRTech SaaS companies, trusted by thousands of businesses globally.

Responsibilities

• Design and implement security controls across cloud-native infrastructure and SaaS applications.
• Partner with Engineering teams to build security into every phase of the Software Development Lifecycle (SSDLC).
• Perform threat modeling and security architecture reviews for new products and platform services.
• Drive vulnerability management by identifying, prioritizing, and partnering with engineering teams to remediate risks.
• Build and improve DevSecOps practices by integrating security tools into CI/CD pipelines.
• Conduct application security assessments, secure code reviews, and penetration testing.
• Secure Kubernetes workloads, containers, APIs, and cloud infrastructure.
• Build automation to improve vulnerability detection, security monitoring, and remediation.
• Investigate and respond to security incidents while driving root cause analysis and long-term fixes.
• Collaborate with Platform Engineering and SRE teams to improve cloud security posture.
• Evaluate third-party services and open-source components from a security perspective.
• Mentor junior engineers and promote secure engineering practices across development teams.
• Stay updated on emerging threats, cloud security trends, and modern attack techniques.

Qualifications

• 4–8 years of experience in Security Engineering, Product Security, Application Security, or Cloud Security.
• Experience securing cloud platforms such as AWS, Azure, or GCP.
• Hands-on experience with Kubernetes, Docker, and container security.
• Strong understanding of Application Security and Secure SDLC practices.
• Experience with Threat Modeling, Secure Design Reviews, and Architecture Reviews.
• Hands-on experience with DevSecOps and integrating security into CI/CD pipelines.
• Experience performing Vulnerability Assessments and working with engineering teams on remediation.
• Knowledge of SAST, DAST, SCA, and modern application security tools.
• Experience securing REST APIs and microservices.
• Good understanding of IAM, secrets management, and cloud security best practices.
• Hands-on scripting experience using Python, Bash, or Go for security automation.
• Strong debugging and problem-solving skills.
• Excellent collaboration and communication skills.
• Experience with CSPM solutions such as Wiz, Prisma Cloud, Lacework, or Microsoft Defender for Cloud.
• Exposure to Infrastructure as Code security (Terraform, CloudFormation).
• Experience with API security testing.
• Familiarity with Zero Trust architecture.
• Experience with SOC 2, ISO 27001, or GDPR compliance initiatives.
• Exposure to AI/LLM security concepts and secure AI application development.
• Security certifications such as Security+, AWS Security Specialty, CCSK, CCSP, or OSCP.
• You enjoy solving security problems rather than just identifying them.
• You are comfortable working directly with software engineers and influencing design decisions.
• You take ownership of security initiatives from design through implementation.
• You automate repetitive security tasks wherever possible.
• You stay curious and continuously learn about evolving threats and technologies.
• You thrive in fast-paced, product-focused environments.
• Work on security challenges at SaaS scale.
• Partner with high-performing engineering teams.
• Build modern cloud-native security solutions.
• Opportunity to influence the security posture of a rapidly growing global product.