Security Engineer (Red Team)

Responsibilities

• Execute vulnerability assessments and penetration tests across web applications, APIs, and mobile platforms
• Implement and maintain security controls in cloud environments (GCP, AWS)
• Develop automation scripts and tools to enhance security processes
• Perform security code reviews and threat modeling
• Support bug bounty program through triage and validation
• Monitor systems for security anomalies and investigate potential incidents
• Collaborate with development teams to remediate security findings

Requirements

• 3+ years of hands-on security testing or software development experience
• Strong understanding of web security fundamentals and OWASP Top 10
• Proficiency in Python, Bash, or Go
• Experience with security testing tools like Burp Suite or OWASP ZAP
• Basic understanding of cloud security concepts
• Ability to communicate technical findings to stakeholders

Preferred Qualifications

• Security certifications such as eJPT, OSCP, or CEH
• Experience with AWS or GCP
• Knowledge of CI/CD pipelines and DevSecOps practices
• Mobile application security testing experience
• Familiarity with Terraform or Ansible

About the Company

Amartha is dedicated to creating a workplace that celebrates diversity, ensures equity, and fosters inclusion to drive innovation and growth.