Back to all roles

Engineering

/

Trusted operator

Security Engineer

Security

Mid Full-Time On-site — Kolkata, West Bengal, India Permanent

Compensation

INR 18 - 30 LPA.

Engagement

Full-Time

Permanent role. Full-time commitment. This is an on-site role at Kolkata. It is not remote and not hybrid.

Scope of role

Drive specific initiatives with minimal supervision. Deepen craft. Begin mentoring others.

01 — The role

Why this role exists at EduRankAI

Day-to-day AppSec work under the Principal Security Engineer. Code review, scans, threat modelling, remediation. Grow into a Senior Security Engineer role over 18-24 months. You will be expected to write the code that fixes what you find, not just describe the bug. The bar is "good enough that engineers ask for your review" not "good enough that the scan passes".

02 — The work

What you will own

  • 01 Code review for security on meaningful changes.
  • 02 Run SAST / DAST / SCA tooling and tune the signal so it is real.
  • 03 Author threat models for new features.
  • 04 Help with incident response.
  • 05 Drive remediation across teams.
  • 06 Write code that fixes what you find.

03 — The expertise

What we look for

OWASP Top 10 masteryOne cloud platform at depthPython or Go scriptingCuriosity, no fear of reading sourceComfort with hard conversations

04 — The bar

Who thrives here

  • You have found at least one real bug in production via code review.
  • You have written a threat model that engineers actually used.
  • You have completed at least one CTF or responsible-disclosure cycle, with proof.
  • You write code to fix what you find, not just tickets describing it.
  • You can describe a security control you killed because it was theatre.

Terms of Engagement

How working time works at this level

A scheduled week: five days, eight hours a day, with two full rest days and latitude over when within the day you work.

Type

Mid-level

Working days

5 per week

Rest days

2 per week

Scheduled week

40 hrs

Per day

8h

Measured by

Objectives agreed at the start of each cycle. Hours recorded for compliance are never used as a performance score.

Where this stands legally

Within the 9-hour day and 48-hour week ceiling of the applicable state Shops and Establishments Act, with at least 24 consecutive hours of weekly rest and a break of at least 30 minutes after five hours of continuous work. Hours are recorded for statutory compliance only. Work beyond the scheduled week is agreed in advance and compensated with time off in lieu.

The full per-level model is published at Working Hours by Level.

05 — Hiring process

What to expect after you apply

  1. 01

    Application review

    Every application is read personally within five business days. We respond either way.

  2. 02

    Take-home or live exercise

    Role-specific. Time-boxed. Real problems we are actually working on, not invented puzzles.

  3. 03

    Conversations

    Deep technical and values conversations with the team you would join. No trick questions. No panel ambushes.

  4. 04

    Offer or honest no

    If yes: digital offer letter, signed in-portal, transparent terms. If no: written feedback if you want it.

Before you start

What we will collect. What it costs. What we will not do with it.

We will collect

  • Name, email, phone — Account + application updates. No marketing.
  • Resume / portfolio link — Human review of your work.
  • Date + place of birth — Identity verification only.
  • Your written responses — Selection rubric. Read by humans.
  • Government ID (later) — Anti-fraud at offer / interview stage. Not at signup.

We will never

  • Sell your data
  • Share with third-party recruiters
  • Use for advertising
  • Train models on it
  • Send marketing email

Our situation

EduRankAI is a small, independent organization building long-term capabilities in educational intelligence, advanced AI systems, and research infrastructure. We take no advertiser money, no donations with strings attached, and no investor pressure on hiring decisions. Applying is free, and every application is read by a human — recruitment, technical, academic and leadership teams. It buys us the right to be honest.

Full transparency policy Questions? Email us

Ready to apply?

We read every application personally. If you are the right person for this role — regardless of pedigree, background, or where you are based — you will hear back from us within five business days.

Mid Full-Time

Security Engineer

Apply →