Loading careers portal...
Location: Bengaluru, Karnataka, India
Additional locations: Open to remote candidates in India
Team: Security & Risk
Job requisition: JOB-0333
Date posted: 4 Sept 2026
Security owns the safety of a platform holding identity documents, salary data and CVs across several jurisdictions.
Research threats specific to a hiring platform: document forgery techniques, account takeover patterns, automated abuse at scale — and build the detections before the attack is common.
The threat model is specific: account takeover, document forgery, automated abuse at scale, and people impersonating employers to defraud job seekers. That last one is why Trust & Safety exists as a separate function and why we work closely with it.
Day to day this role works with Cryptography, Security Research, Reverse Engineering and Exploit Analysis.
The same for every role, at every level — a haul truck driver and a staff engineer get the same cover.
Provident fund and gratuity as standard, group life and accident cover, and pay reviewed annually against the band for your level.
Family medical insurance including parents, an annual health check, and on-site occupational health at the mine and plant sites.
A yearly learning budget you choose how to spend, certification support, and sponsorship for the statutory tickets mining roles require.
Earned leave, casual and sick leave, public holidays by state, and parental leave for both parents.
Applying takes one form. You will get a Candidate ID immediately and can follow every stage from your dashboard.
None of these are required. They are the things that would help, and a strong application is regularly missing all of them.
Reviews and threat models done alongside engineering rather than at the end. Findings are written so a developer can act on them, not as a scanner dump.
AppSec, GRC and security research are distinct tracks, and the team is small enough to move between them.
Bengaluru is our largest site and where most of engineering, product, design, data and AI sit. The office is in the eastern corridor, and the majority of these roles are remote-friendly with the team meeting in person a few days a week.
The city has the deepest technology labour market in India, which cuts both ways: the work is here, and so is everyone else commuting to it. Teams are deliberate about core hours because a cross-city commute in the evening peak can take longer than the meeting it was for.
Equal Opportunity: Baalvion is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
Hiring Disclosure: All hiring and employment practices in India adhere to local and national labor laws and regulations.
Labor Law Reference: Shops and Establishment Act, IT Act 2000
Remote-first where the work allows. At site-based operations, transport, canteen and township housing where they apply.