Associate Security Architect - Product Security

The CoinDCX Journey: Building the Future of Finance: At CoinDCX, our mission is clear - to make crypto and blockchain accessible to every Indian and enable them to participate in the future of finance.

As India’s first crypto unicorn valued at $2.45B, we are reshaping the financial ecosystem by building safe, transparent, and scalable products that power adoption at scale.

We believe that change starts together. It begins with bold ideas, relentless execution and people who want to build what’s next.

If you’re driven by purpose and thrive in environments where your work defines the next chapter of an industry, you’ll feel right at home here.

Inside CoinDCX’s Security Team Our Security team is responsible for safeguarding CoinDCX’s digital assets, systems, and data from potential threats. We work across applications, infrastructure, and operational security to proactively identify risks, implement strong security controls, and ensure compliance with industry standards. If you’re a tech-savvy problem solver with a passion for Security, join us in keeping CoinDCX’s operations running smoothly and securely.

What You’ll Do:

• Plans, researches, and designs security architecture for CoinDCX application, systems, and network
• Determine and updated the security roadmap by evaluating business strategies and requirements
• Performs security design and architecture reviews for the existing, and future implementations and new features, and provides recommendations to reduce the risks
• Proactively drive the security requirements phase along with the product and engineering teams, and develop security requirements
• Develop and review threat models and security risk assessments to identify risks and drive mitigations
• Continuously review and align the secure development lifecycle to industry standards, including Microsoft SDL, OWASP development guides, and privacy-related guides
• Work collaboratively with the development and scrum teams to strengthen the existing software development lifecycle and standardize the secure development process across the company
• Review current products’ and systems’ security measures and implement enhancements
• Review of cloud and physical infrastructure and their threat landscape to ensure ongoing and continued implementation of adequate security controls
• Work with GRC and Security Engineering function to develop and implement cyber security policies, procedures, standards, and guidelines for production and enterprise system and network
• Verify that security requirements that are defined in the security plans, risk assessments, policies, and procedures are followed, and protection measures are functioning as intended
• Assist in driving application security program activities and perform proof of concept activities as needed
• Design and execute a security awareness campaign to educate engineering managers and developers on secure architecture, coding, and testing.

You’ll Excel in This Role If You have:

• Bachelor’s degree in computer science or related field.
• 5+ years of experience in Information security and related technologies.
• 1+ years of experience in security architecture and security solution engineering.
• Experience in architecting and solving security solutions across multiple industries and technologies.
• Experience in designing and analyzing security solutions with a deep understanding of Identity and access management, cloud & infrastructure security, application security, data & network security, security governance, etc.
• Experience with driving Secure SDLC activities, DevSecOps (CI/CD), and agile software development practices.
• Knowledge of Security Integration into CI/CD and experience in driving CI/CD adaptation for Security controls.
• Sound understanding of security by design principles and architecture-level security concepts.
• Strong leadership skills and the ability to coach and mentor other members of the Product Security teams.
• Experience with penetration testing methodologies and tools including security analysis, audits, and reviews.
• Knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities.
• Sound knowledge of OWASP Top 10 and SANS 25.
• Must have Knowledge and experience with security standards such as CCSS (CryptoCurrency Security Standard), NIST, ISO 27001/2, CSA, SOC 1&2, and CIS.
• CISSP, TOGAF/SABSA, or Cloud security certifications are preferred.
• Prior application development or software engineering experience is desirable.
• Ability to convey security concepts to both technical and non-technical audiences.
• Flexible, adaptable, and able to manage multiple tasks in a dynamic, fast-paced environment.
• Excellent written and verbal communication skills, interpersonal and presentation skills, and the proven ability to influence and communicate effectively.
• Excellent business acumen and a commercial outlook.

Hiring Process: Here’s what your journey with us looks like:

• Application Review – We assess for skills, alignment, and intent
• Recruiter Connect – A short conversation to understand you better
• Functional Round(s) – Deep dive into your approach, craft, and problem-solving
• Assignment / Simulation Round – A take-home task or live problem-solving exercise to understand how you think and execute in real scenarios
• Culture & Values Discussion – A conversation to understand our ways of working and how you thrive best
• Founder Conversation (Optional) – For certain roles and senior levels, you may meet our founders to explore strategic alignment and long-term fit

Where We Work: We believe the best ideas emerge when people build together. Collaboration, speed and trust come alive when teams share the same space.

With this belief, we operate as a work-from-office organisation. This role is based out of our Bengaluru office, where energy, alignment and innovation move in real time.

Perks That Empower You: We believe great people deserve great experiences.

• Design Your Own Benefits: Flexible perks to match your lifestyle
• Unlimited Wellness Leaves: Rest and recharge as you need
• Mental Wellness Support: Access to therapy and wellness resources
• Learning Sessions: Bi-weekly learning and growth opportunities

Ready to Build What’s Next? If you’re looking for a role that gives you direct access to high-stakes decisions, deep impact and a chance to build the future of finance, this is it.

Join CoinDCX and help us make crypto accessible to every Indian, together.