Interactive Brokers Group

1 month ago

Security Engineer III

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 10 hours agoStatus: Live

Job Summary

Own application security scanning across SAST, DAST, and SCA, building and scaling the infrastructure that protects the software delivery pipeline. Tune scanning rules, reduce false positives, and embed security gates into CI/CD at pull request, merge, and release stages. Write custom detection logic, triage findings by real exploitability, and automate routing to engineering teams with actionable context. Integrate authenticated dynamic scanning and support remediation and dependency risk programs.

Location: Mumbai

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own and operate SAST, DAST, and software composition analysis scanning platforms across engineering pipelines, including onboarding repositories, tuning rulesets, and maintaining coverage metrics.
•Build and maintain CI/CD security gates that enforce scan policies at pull request, merge, and release stages.
•Write custom detection rules tailored to the organization’s tech stack and threat model for vulnerability classes relevant to used languages/frameworks.
•Triage and prioritize scan findings by real exploitability, distinguish true positives from noise, and build suppression workflows to reduce false positives without hiding real risk.
•Integrate authenticated dynamic scanning into pre-production environments and partner with engineering teams on remediation with exploit context and fix guidance.

Pay and Benefits

Perks:Health InsuranceLife InsuranceAnnual BonusMeal AllowanceHybrid Working

Key Requirements

•5-7 years in application security, DevSecOps, or security engineering with a tooling focus.
•Strong technical knowledge of web application vulnerabilities (e.g., injection, broken authentication, insecure deserialization, XXE, SSRF, IDOR, race conditions, business logic flaws).
•Ability to determine whether a scan finding is exploitable in context using data flow and trust boundaries.
•Hands-on experience deploying and tuning SAST platforms, including rule development/modification and understanding analysis limitations.
•Proficiency in scripting for automation and tooling (Python or Go strongly preferred).

Experience:5-7 yearsApplication securityDevSecOpsWeb application securitySecurity toolingCI/CD

Skills:Analytical thinkingProblem-solvingAttention to detailCollaborationCommunication

Tech Stack:SASTDASTSCACI/CDScriptingPythonGoCycloneDXSPDXSBOMAuthenticated scanningCSRF tokensDataflow analysisAST-based analysis

Company Brief

Interactive Brokers Group

Operates an electronic trading platform providing brokerage services for individuals and institutions across global markets, offering equities, options, futures, forex, bonds, and related clearing and custody services with advanced trading technology and low-cost executions.

Industry: Trading Platforms

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Greenwich, United States

Founded: 1977

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Interactive Brokers Group

1 month ago

Security Engineer III

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 10 hours agoStatus: Live

Job Summary

Location: Mumbai

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own and operate SAST, DAST, and software composition analysis scanning platforms across engineering pipelines, including onboarding repositories, tuning rulesets, and maintaining coverage metrics.
•Build and maintain CI/CD security gates that enforce scan policies at pull request, merge, and release stages.
•Write custom detection rules tailored to the organization’s tech stack and threat model for vulnerability classes relevant to used languages/frameworks.
•Triage and prioritize scan findings by real exploitability, distinguish true positives from noise, and build suppression workflows to reduce false positives without hiding real risk.
•Integrate authenticated dynamic scanning into pre-production environments and partner with engineering teams on remediation with exploit context and fix guidance.

Pay and Benefits

Perks:Health InsuranceLife InsuranceAnnual BonusMeal AllowanceHybrid Working

Key Requirements

•5-7 years in application security, DevSecOps, or security engineering with a tooling focus.
•Strong technical knowledge of web application vulnerabilities (e.g., injection, broken authentication, insecure deserialization, XXE, SSRF, IDOR, race conditions, business logic flaws).
•Ability to determine whether a scan finding is exploitable in context using data flow and trust boundaries.
•Hands-on experience deploying and tuning SAST platforms, including rule development/modification and understanding analysis limitations.
•Proficiency in scripting for automation and tooling (Python or Go strongly preferred).

Experience:5-7 yearsApplication securityDevSecOpsWeb application securitySecurity toolingCI/CD

Skills:Analytical thinkingProblem-solvingAttention to detailCollaborationCommunication

Tech Stack:SASTDASTSCACI/CDScriptingPythonGoCycloneDXSPDXSBOMAuthenticated scanningCSRF tokensDataflow analysisAST-based analysis

Company Brief

Interactive Brokers Group

Industry: Trading Platforms

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Greenwich, United States

Founded: 1977

Website LinkedIn