Security Engineer

About WebEngage: WebEngage is an enterprise-grade customer engagement and retention platform that helps global brands across industries such as e-commerce, fintech, travel, edtech, gaming, media, and consumer apps. and turn data into measurable revenue impact.Trusted by 800+ brands globally, we have strong presence in India, UAE, KSA, SEA, Europe and beyond. WebEngage powers intelligent, real-time engagement across the entire customer lifecycle.

• We are built for scale.

• We are built for complexity.

• We are built for outcomes.

At our core, WebEngage is a full-stack retention operating system that combines:

• A powerful Customer Data Platform (CDP)

• Real-time behavioral segmentation and intelligence

• Omnichannel journey orchestration

• AI-driven personalization and recommendations

• Deep analytics, experimentation, and revenue attribution

WebEngage BLACK: our AI-native layer that brings Agentic capabilities to engagement. Learn more about us at www.webengage.comPosition OverviewWe are seeking a skilled Security and Compliance Engineer to join our team. In this role, you will play a pivotal part in maintaining and enhancing our security posture, ensuring compliance with industry standards, and collaborating across teams to mitigate risks. This position involves hands-on technical work, process optimization, and project management in a dynamic SaaS environment. The responsibilities listed below are non-exhaustive; you will have access to established onboarding procedures and will grow by assuming broader ownership over time. Key aspects include implementing security tools, reviewing processes, and driving cross-functional initiatives to meet security obligations.Responsibilities:

• Conduct penetration tests using specialized tools to identify vulnerabilities and collaborate with Development or DevOps teams to plan and implement remediation strategies.

• Coordinate with external Vulnerability Assessment and Penetration Testing (VAPT) vendors for audits, serving as the liaison between the vendor and the engineering team.

• Partner with the DevOps team to perform cloud security audits and develop remediation plans.

• Respond to security questionnaires from customers or vendors and address security-related questions during virtual meetings.

• Lead security-related projects, providing regular progress updates and reports.

• Implement and configure tools to enhance security practices, including static code analysis and automated code audits.

• Manage the security calendar and execute activities such as:

• Cloud Business Continuity Planning (BCP) and Disaster Recovery (DR) exercises in collaboration with the DevOps team.

• Cryptographic audits (including encryption at rest and in transit) and key rotation processes with DevOps support.

• Audits of automated code quality checks within CI/CD pipelines.

• Reviews of standard operating procedures to ensure adherence and timely execution.

• Oversee the compliance calendar for standards such as ISO 27001, ISO 27701, SOC 2, and future certifications, including:

• Coordinating with responsible teams to ensure all required activities are completed on schedule.

• Responding to technical and process-related inquiries during audits alongside other team members.

• Monitoring and ensuring employee security training and retraining programs are up to date.

• Tracking and maintaining all security-related metrics.

• Handling any additional audit-related tasks.

Required Qualifications:

• Strong understanding of SaaS applications and associated security challenges.

• Familiarity with one or more cloud platforms, such as AWS, GCP, or Azure.

• Knowledge of fundamental networking concepts, including OSI layers, TLS protocols, and cryptograp...