Engineering
/Individual contributor at the frontier
Senior Security Engineer
AppSec & InfraSec
Compensation
INR 30 - 50 LPA
Engagement
Full-Time
Permanent role. Full-time commitment. This is an on-site role at Kolkata. It is not remote and not hybrid.
Scope of role
Own complex problems end-to-end. Set technical direction. Mentor mid and junior teammates.
01 — The role
Why this role exists at EduRankAI
Day-to-day owner of application + infra security. You will report to the Principal Security Engineer and you will be the engineer who reads the diffs, runs the scans, threat-models the new features, and writes code to fix what they find.
02 — The work
What you will own
- 01 Code review for security on every meaningful change.
- 02 Run SAST / DAST / dependency scans; tune them so the signal is real.
- 03 Penetration test new features before release.
- 04 Own GDPR / DPDPA technical controls.
- 05 Respond to security incidents alongside the Principal.
- 06 Author secure-by-default templates and guardrails.
03 — The expertise
What we look for
04 — The bar
Who thrives here
- → You have personally found and reported at least one real vulnerability in a production system.
- → You can write code that fixes the bug, not just describes it.
- → You have an opinion about which scanning tools are theatre and which are not.
- → You have led at least one threat-modelling session that engineers found useful.
Terms of Engagement
How working time works at this level
No counted hours. A five-day week with a four-hour overlap window so colleagues can reach you, and objectives agreed for the cycle.
Type
Senior
Working days
5 per week
Rest days
2 per week
Hours counted
No
Daily overlap
4h
Measured by
Objectives agreed for the cycle, the quality of the judgement calls, and the people the work makes better. Not attendance.
Where this stands legally
Hours are not counted at this level. The statutory ceiling of 9 hours a day and 48 a week remains the limit the role is designed to fit inside: if the work cannot be done within a normal week, the scope is wrong, not the person.
The full per-level model is published at Working Hours by Level.
05 — Hiring process
What to expect after you apply
- 01
Application review
Every application is read personally within five business days. We respond either way.
- 02
Take-home or live exercise
Role-specific. Time-boxed. Real problems we are actually working on, not invented puzzles.
- 03
Conversations
Deep technical and values conversations with the team you would join. No trick questions. No panel ambushes.
- 04
Offer or honest no
If yes: digital offer letter, signed in-portal, transparent terms. If no: written feedback if you want it.
Before you start
What we will collect. What it costs. What we will not do with it.
We will collect
- Name, email, phone — Account + application updates. No marketing.
- Resume / portfolio link — Human review of your work.
- Date + place of birth — Identity verification only.
- Your written responses — Selection rubric. Read by humans.
- Government ID (later) — Anti-fraud at offer / interview stage. Not at signup.
We will never
- Sell your data
- Share with third-party recruiters
- Use for advertising
- Train models on it
- Send marketing email
Our situation
EduRankAI is a small, independent organization building long-term capabilities in educational intelligence, advanced AI systems, and research infrastructure. We take no advertiser money, no donations with strings attached, and no investor pressure on hiring decisions. Applying is free, and every application is read by a human — recruitment, technical, academic and leadership teams. It buys us the right to be honest.
Ready to apply?
We read every application personally. If you are the right person for this role — regardless of pedigree, background, or where you are based — you will hear back from us within five business days.
Other roles in Engineering
Explore related openings
Senior Full-Time