Security Analyst - I (VAPT)

About Juspay

Juspay is a leading multinational payments technology company, powering superior conversion rates, seamless customer experiences, cost optimization, and fraud reduction at scale for 500+ top global enterprises and banks. Founded in 2012, the company processes over 300 million daily transactions, exceeding an annualized total payment volume (TPV) of $1 trillion with 99.999% reliability. Headquartered in Bangalore, India, Juspay’s global network of 1200+ payment experts operates across San Francisco, Dublin, São Paulo, and Singapore.

Juspay offers a modular and interoperable product suite for merchants that includes open-source payment orchestration, seamless authentication, payment tokenization, fraud & risk management, global payouts, end-to-end reconciliation, unified payment analytics, and more. For banks, Juspay’s offerings include end-to-end white label payment gateway solutions & real-time payments infrastructure.

Security Analyst - I (VAPT )

Job Description:-

Juspay looks for people who deeply care about their craft and advance the state of their art. We take active interest to grow people to discover their hidden potential. We are currently looking for passionate Software Developers who can not only identify potential weaknesses in the systems and solutions but can also design and implement security & privacy controls to support organization cyber security commitments. You’ll also contribute to our other security domains of governance and compliance, incident detection and response, infrastructure, and IT security.

Skill & experience Requirements:-

● 1-2 years of experience in Software Development with overlap into the field of Information Security.

● Must have a deep understanding of OWASP Top 10 vulnerabilities and their remediation strategies.

● Ability to conduct Vulnerability Assessment and Penetration Testing using popular tools

● Ability to perform Threat Modeling on application architecture to identify threats and implement possible controls.

● Exposure to DevSecOps - Security integration in CI/CD pipeline.

● Hands-on experience with any programming language like Java, C++, C#, JavaScript and HTML. Any exposure to Haskell, OCaml, Pure Script, etc will be a plus! Scripting experience with Python, Shell, Ruby, etc will be good too.

● Experience with Amazon Web Services and related technologies (EC2, IAM, S3, Lambda, VPC etc.) or equivalent technologies in Google Cloud or Azure is a bonus.

● Good understanding of network and web application protocols (Http, Https, TCP/IP, SAML 2.0, OAuth 2.0, Rest APIs, etc).

● Experience in Agile development methodologies.

● Independent, self-motivated and comfortable working in a fast-paced environment with teams ranging from product, administration to engineering and infra.

● Contributions to the security community is a huge plus and shouldn’t be a tool junkie!

Core Responsibilities :-

● Help Define Secure Software Development practices with a focus on mitigation of all application security risks.

● Conduct VAPT to identify potential vulnerabilities in web-based applications, networks and other types of computing systems and cloud resources on a regular basis.

● Provide coding expertise in the analysis, development, and evaluation of solutions to secure applications.

● Work closely with the Product Development and Cloud Enablement teams to help build secure and resilient systems and applications.

● Evaluate, recommend, and implement security controls to protect cloud services and other information assets.

● Conduct security design and code review on all code-bases to identify potential architecture and code vulnerabilities.

● Interpret security requirements from compliance documents, create technical solutions, and explain complex security concepts to non-technical business partners.

● Participate in product security incident response activities and assist with identifying and driving the resolutions.