Jobs › Companies › Fampay › Security Engineer Intern

Sobre este puesto de Security Engineer Intern en Fampay

Fampay · Presencial · Bengaluru
About Fam (previously FamPay)
 
Fam is India's first payments app for everyone above 11. FamApp helps make online and offline payments through UPI and FamCard. We are on a mission to raise a new, financially aware generation, and drive 250 million+ youngest users in India to kickstart their financial journey super early in their life.
 
Founded in 2019 by IIT Roorkee alumni, Fam is backed by some of the most respected investors around the world like Elevation Capital, Y-Combinator, Peak XV (Sequoia Capital) India, Venture Highway, Global Founder’s Capital and the likes of Kunal Shah, Amrish Rao as angel investors.
 
About the Role
 
We are looking for a Security Enthusiast who thinks like a hacker but works for the good guys. You shouldn't just find bugs; you should be obsessed with understanding why they exist and how to fix them for good.
 
As an Application Security Engineer Intern, you will be the first line of defense for the Fam. You will break things before the bad guys do, automate security checks, and work side-by-side with our engineering team to build a fortress around our users' hard-earned money.
 
If you get a rush from finding an RCE, live on r/netsec, or spend your weekends capturing flags or bounties, this role is for you.
 
Note: This is an onsite internship at Fam HQ, Bangalore.
 
Curious to know about FamPay's tech stack? Click here to know what makes and keeps Fam running!

On the Job

  • Break the App: Perform vulnerability assessments and penetration testing (VAPT) on our Web Applications, Android/iOS Apps, and APIs.
  • Automate Defense: Help integrate security tools (SAST/DAST) into our CI/CD pipelines. We believe security should move as fast as our code.
  • Code Review: Review source code for security flaws (like SQLi, XSS, IDOR) and help developers write secure code from day one.
  • Bug Triage: Analyze incoming bug reports from our Bug Bounty programs, validate them, and prioritize fixes.
  • Threat Modeling: Work with product and engineering teams during the design phase to identify potential security risks before a single line of code is written.
  • Learn & Evolve: Stay updated with the latest CVEs, zero-days, and security trends.
  • Who you are

  • The Hacker Mindset: You have a deep understanding of the OWASP Top 10 (Web & Mobile) and know how to exploit and patch them.
  • Tool Wizardry: Hands-on experience with tools like Burp Suite, Metasploit, Nmap, Postman, or similar open-source security tools.
  • Coding Chops: You can read code (Python, Go, Java, or JavaScript) and write scripts to automate attacks or defenses.
  • Curiosity: You are a student of the game. You actively participate in CTFs, Bug Bounties, or have a rank on platforms like HackTheBox/TryHackMe.
  • Communication: You can explain a complex vulnerability to a developer without sounding like a robot.
  • Bonus Points

  • Experience with Cloud Security (AWS/GCP).
  • A Hall of Fame mention in any major tech company's Bug Bounty program.
  • Open source security contributions.
  • Why Join Us?

  • Impact: You’ll be protecting the financial data of millions of teenagers. The bugs you find and fix will have a direct, real-world impact.
  • Mentorship: Work directly with founding members and senior engineers who have built systems at scale.
  • Perks: Competitive stipend, Certificate and Letter of Recommendation, Friendly leave policy, and cool Fam merchandise!
  •  
    Ready to be part of the Fam? Apply Now and complete this challenge - https://ctf.fampay.co/
    ¿Listo para postularte en Fampay?
    Postúlate en Fampay

    Empleos similares

    KI
    Sr. Security Engineer - FRM
    KRAFTON INDIA
    ⚡ Postúlate pronto Bengaluru Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 13h
    Telstra
    Senior Software Engineer - Java, IAM, Security
    Telstra
    ⚡ Postúlate pronto Bengaluru, Karnataka Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 19h
    MS
    Principal IAM engineer - Vice President - Cyber Security Engineering
    Morgan Stanley
    ⚡ Postúlate pronto Bengaluru, India Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 19h
    DigitalOcean
    Staff Software Engineer-Security Products
    DigitalOcean
    ⚡ Postúlate pronto Bengaluru Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 1d
    DigitalOcean
    Principal Software Engineer - Security
    DigitalOcean
    ⚡ Postúlate pronto Bengaluru Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 1d
    DigitalOcean
    Senior Product Security Engineer [Security Platform]
    DigitalOcean
    ⚡ Postúlate pronto Bengaluru Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 1d
    Point72
    Network Security Engineer
    Point72
    ⚡ Postúlate pronto Bengaluru, India Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 1d
    LO
    Engineer, Information Security_Java_Springboot_Microservices
    Lowe's
    ⚡ Postúlate pronto Bengaluru Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 1d
    Conviva
    Staff Security Operations Engineer
    Conviva
    ⚡ Postúlate pronto Bengaluru, India Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 2d

    Regístrate para recibir sugerencias adaptadas a los empleos que abres y las búsquedas que guardas.

    Más empleos en Fampay

    Ver todos los empleos en Fampay →

    Postúlate ahora
    🤖

    Un momento — para

    JobsRadar se creó para personas reales que están pasando un mal momento en su búsqueda de empleo — no para solicitudes automatizadas. Estás haciendo clic demasiado rápido y ahora estás bloqueado temporalmente.

    Vuelve más tarde. Si de verdad estás buscando empleo, cuentas con nosotros — solo compórtate como una persona.

    Catch your next role the second it’s posted.

    Create a free account and we’ll watch the boards for you — the instant a job matches your search, it lands in your inbox or Telegram. No digging, no refreshing.

    Create free account

    Free forever · takes 30 seconds · already have one?

    Toma ventaja en tu búsqueda de empleo.

    Únete a nuestro canal de Telegram para lo que te ayuda a conseguir el puesto — referencias salariales, el pulso semanal del mercado y avisos de nuevas funciones. Sin spam, solo señal.

    Únete al canal — es gratis