SDE-III – Information Security

Job Description: SDE-III – Information Security (Amber)Role: SDE-III – Information SecurityDepartment: Engineering / Information SecurityLocation: PuneEmployment Type: Full-timeAbout AmberAmber is a global student accommodation platform helping students find and book verified housing across 250+ cities. With over 1 million beds listed and millions of users worldwide, we are building a secure, resilient, and scalable ecosystem that supports students, partners, and universities across the globe.As we continue to expand internationally, safeguarding our platform and customer data is critical. We are looking for an experienced SDE-III – Information Security professional to strengthen our global security posture and ensure trust, privacy, and protection across all regions we operate in.Role OverviewAs an SDE-III – Information Security, you will be responsible for designing, implementing, and scaling security solutions that protect Amber’s global applications, infrastructure, and customer data.You will work across engineering, product, data, and cloud teams to embed security standards throughout the development lifecycle and ensure compliance with international security and privacy requirements.This is a senior-level, high-impact role with significant ownership, autonomy, and influence on technical decision-making.Key ResponsibilitiesSecurity Architecture & EngineeringDesign, implement, and scale security architecture for a global customer base across multiple regions.Develop security frameworks and best practices aligned with global standards (OWASP, NIST, CIS).Conduct security design reviews, threat modeling, and risk assessments for new and existing systems.Application & Product SecuritySecure Amber’s web, API, mobile, and platform products used by customers worldwide.Integrate SAST, DAST, SCA, and container scanning tools into global CI/CD pipelines.Perform code reviews and provide guidance to engineering teams on secure coding principles.Cloud & Infrastructure SecurityStrengthen cloud security posture across AWS multi-region deployments.Implement IAM governance, secrets management, network isolation, and workload protections.Automate detection and remediation of cloud misconfigurations across global environments.Security Operations & AutomationLead incident response for global systems and coordinate cross-functional communication.Build automation for log ingestion, anomaly detection, and response workflows.Improve observability and response capabilities using SIEM/SOAR tools.Governance, Compliance & Global StandardsSupport Amber’s global compliance programs including SOC2, ISO 27001, GDPR, PCI-DSS, and region-specific privacy regulations.Conduct vendor and partner security evaluations across international markets.Build and maintain security documentation, policies, and global processes.Qualifications & SkillsMust-Have6–10 years of experience in Information Security, Application Security, or Cloud Security roles.Expertise in securing large-scale, customer-facing platforms or SaaS products.Strong experience with AWS security services across multi-region architectures.Proficiency in one or more languages: Python, Go, Java, or Node.js.Hands-on experience with CI/CD security tools (SAST, SCA, DAST, container scanning).Deep understanding of OWASP Top 10, secure SDLC, threat modeling, and vulnerability management.Experience working with global teams and supporting systems with international user bases.Good-to-HaveExperience with Kubernetes security, container runtime protections, and eBPF tools.Experience building custom security automation or internal security tools.Familiarity with SIEM/SOAR, EDR, IDS/IPS, and advanced threat detection systems.Security certifications: OSCP, OSWE, GIAC, CISSP, CSSLP, CISM.What We OfferCompetitive global compensation package.Opportunity to safeguard a high-scale global platform impacting millions of users.Ownership, influence, and room to innovate within a fast-scaling environment.Inclusive and collaborative culture focused on learning and excellence.