About the role :

As a Senior Product Security Engineer at slice, you will play a key role in securing our mobile-first fintech products and APIs.

You will work closely with engineering and product teams to embed security into the entire product lifecycle and ensure our systems are resilient against real-world attacks.

You will be responsible for identifying risks, driving secure design practices, and building scalable security solutions across applications and services.

The ideal candidate is a self-driven security professional who can operate independently, influence stakeholders, and thrive in a fast-paced environment.

What You will do :

- Conduct security assessments across mobile (Android/iOS), web applications, and APIs.

- Perform threat modeling and security architecture reviews for new and existing features.

- Identify and exploit business logic vulnerabilities, especially in fintech/payment flows.

- Perform secure code reviews across services (Java, Go, Node, Python).

- Drive secure design practices in microservices-based architecture.

- Build and improve security automation in CI/CD pipelines.

- Perform mobile security testing, including reverse engineering and runtime analysis.

- Conduct CVE/zero-day impact analysis and drive remediation.

- Collaborate with developers to triage and fix vulnerabilities.

- Handle bug bounty submissions and external vulnerability reports.

- Monitor and triage alerts from security tools (SIEM, CSPM, DLP, etc.

- Provide security advisory and consultation to product and engineering teams.

- Support compliance requirements (PCI-DSS, ISO 27001, RBI guidelines).

What you will need :

- 5 to 7 years of experience in Product Security / Application Security.

- Strong expertise in Mobile Security (Android/iOS), API Security, and Web Security covering OWASP Top 10 & Mobile Top 10.

- Hands-on experience with tools like Burp-Suite, Frida, Jadx, Apktool, Ghidra and other application security tools.

- Strong understanding of:

a. Rooting (Android) and Jailbreaking (iOS) and their security implications.

b.Bypassing root/jailbreak detection mechanisms.

c. SSL pinning bypass techniques.

d. Secure storage mechanisms (Android Keystore / iOS Keychain).

e. Runtime attacks and dynamic analysis.

- Experience with threat modeling and secure architecture reviews.

- Hands-on experience in secure code review.

- Understanding of microservices security architecture.

- Experience in security automation and DevSecOps practices.

- Experience with AWS cloud security and misconfigurations.

- Basic knowledge of Kubernetes and container security.

- Understanding of network, endpoint, and infra security concepts.

- Experience in CVE analysis and zero-day impact assessment.

- Exposure to AI/ML security risks and architecture reviews.

- Good to have experience in fintech or banking domain.

Soft Skills:

- Strong communication and stakeholder management.

- Ability to work independently with high ownership.

- Strong problem-solving and analytical thinking.

- Collaborative mindset with developer-first approach.

Life at slice:

Life so good, youd think were kidding:

- Competitive salaries.

Period :

- An extensive medical insurance that looks out for our employees & their dependents.

Well love you and take care of you, our promise :

- Flexible working hours.

- Just dont call us at 3AM, we like our sleep schedule.

- Tailored vacation & leave policies so that you enjoy every important moment in your life.

- A reward system that celebrates hard work and milestones throughout the year.

- Expect a gift coming your way anytime you kill it here.

- Learning and upskilling opportunities.

Seriously, not kidding :

- Good food, games, and a cool office to make you feel like home.

- An environment so good, youll forget the term colleagues cant be your friends.