← All roles

Senior Engineer - Application and Platform Security (India)

Juniper Square · Engineering
Apply on company site
RemoteFull-timePosted 11mo ago

About the role

Senior Engineer on the Platform Engineering team focused on identifying and remediating vulnerabilities across applications and cloud infrastructure, building guardrails, automation, and secure defaults. Hands-on role spanning application code, build/deployment systems, cloud infrastructure, and AI-powered features.

Responsibilities

  • Lead security design reviews and threat models for new product features, with depth in authentication, authorization, data isolation, and high-risk financial workflows.
  • Perform manual code review and security testing of web applications and APIs. Focus on authorization and business logic flaws that scanners miss, and drive fixes through to verification.
  • Design secure-by-default libraries, framework-level controls, and custom static analysis rules that eliminate whole classes of vulnerabilities.
  • Triage application findings from automated and manual testing and external assessments. Group them by root cause and write remediation guidance engineers can act on.
  • Threat-model and test AI-powered product features against risks like prompt injection, unsafe tool use, data leakage, and excessive agency. Define secure patterns other teams can reuse.
  • Share design review and triage responsibilities across the team.
  • Support external penetration testing program, from scoping through retest.
  • Partner with teammates on build pipeline and supply-chain security, especially dependency risk in application code.
  • Participate in incident response for application security events.
  • Build security automation and agents that cut review and triage time.

Qualifications

  • 5+ years in application or product security, or in software engineering with a strong security focus.
  • Deep experience finding vulnerabilities through manual review. You find authorization and business logic flaws by reading code, not only by running a scanner.
  • Strong Python, plus working proficiency in JavaScript/TypeScript, enough to review front-end code for client-side issues. You write production-quality code, not just scripts.
  • In-depth knowledge of OAuth 2.0/OIDC, SAML, MFA, session management, and access control models, with hands-on experience implementing them securely.
  • Experience leading threat modeling sessions with engineering teams and turning the output into concrete requirements.
  • Experience running and tuning SAST, SCA, and DAST, including writing custom rules.
  • Working knowledge of cloud, container, and CI/CD security, enough to reason about how application design interacts with infrastructure.
  • Working understanding of LLM application risks and the drive to go deep.
  • Clear writing and a track record of influencing engineering teams without becoming a bottleneck.

Skills

Required:PythonJavaScript/TypeScriptOAuth 2.0 / OIDCSAMLMFAThreat ModelingSAST / SCA / DAST
Last updated Oct 15, 2026. Interested? Apply on the company site.
Juniper Square logo

About Juniper Square

Connected software and fund administration services | Juniper Square

Over 2,100 GPs across private equity, venture capital, and commercial real estate trust Juniper Square’s connected fund software and services to raise capital more efficiently, reduce operational risk, and deliver a world-class LP experience.

softwarefund administrationprivate marketscapital marketsreal estateventure capitalprivate equity
Company profileWebsite

More open roles at Juniper Square