About Plum
Plum is an employee insurance and health benefits platform focused on making health insurance simple, accessible and inclusive for modern organizations.
Healthcare in India is seeing a phenomenal shift with inflation in healthcare costs 3x that of general inflation. A majority of Indians are unable to afford health insurance on their own; and so as many as 600mn Indians will likely have to depend on employer-sponsored insurance.
Plum is on a mission to provide the highest quality insurance and healthcare to 10 million lives by FY2030, through companies that care. Plum is backed by Tiger Global and Peak XV Partners.
Roles and Responsibilities:
- Perform security assessments and audits of our infrastructure, identifying and mitigating security gaps and weaknesses.
- Proven expertise in using Terraform and other infrastructure as code tools, managing vulnerabilities, policies and implementing best practices.
- Conduct in-depth security reviews of application code, working closely with developers to code securely from the outset and address issues early during coding and testing phases.
- Experience with SAST, SCA, and DAST, with the ability to address real-world challenges in these areas.
- Implement and manage security tools within the CI/CD pipeline, focusing on DevSecOps practices.
- Monitor and analyse logs, events, and metrics to identify security incidents, potential breaches, and emerging threats.
- Understand runtime security, image scanning, network security, access control, host OS hardening, and vulnerability management in the container lifecycle.
- Develop and maintain incident response plans, procedures, and playbooks for effective handling of security incidents and breaches.
- Design, implement, and maintain security measures for our cloud infrastructure, including VPCs, security groups, IAM roles, and access controls.
- Maintaining security hardening configurations and guidance for the diverse set of service available across AWS, GPC and other public cloud providers.
Experience and Qualifications:
- 2+ years of Security Engineering experience preferably in AWS or GCP Cloud.
- Bachelor's degree in Computer Science, Information Security, or a related field. Equivalent work experience may be considered.
- Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)Familiar with SAST, DAST, Fuzzing, and other tools.
- Experience with Wiz, Prisma Cloud, Jira, Confluence & Terraform / CloudFormation (Infrastructure as a code)Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
- Experience with security technologies, such as firewalls, IDS/IPS, SIEM, DLP, antivirus, and vulnerability scanners.
- Good understanding of cloud security architecture, security assessments, audit standards for the Cloud, security threats in the cloud.
- Solid understanding of network protocols, TCP/IP, and network security concepts
Top Skills
What We Do
Plum is a talent assessment platform that strips away bias and reveals human potential to revolutionize how global enterprises hire, grow, and retain talent. With unmatched scalability, Plum powers more objective and equitable talent decisions across the employee lifecycle using the predictive power of psychometric data.
With Plum, you can:
• Quantify job fit to match the right people to the right roles
• Spot potential to objectively identify and start developing future leaders sooner
• Grow your people by empowering them with personalized career insights
• Work better together by equipping leaders with insights to build high-performing teams
Plum data is 4X more predictive of future job success than what you’ll find on a resume, so you can finally look beyond credentials, degrees, and past job titles to discover what candidates and employees are truly capable of achieving if given the opportunity. That means you can build a more diverse talent pipeline by surfacing people for opportunities based on raw talent and potential, regardless of race, gender, or background.
