Security Engineer III – SaaS Security at ibgllc

Location: Mumbai, Maharashtra
Type: Full-time
Level: senior
Posted: Aug 25, 2026

Description

Interactive Brokers Group is hiring a Security Engineer III – SaaS Security to lead hands-on threat modeling across SaaS applications, cloud-native and on-premises platforms, APIs, hybrid environments, and third-party integrations. The role focuses on identifying design-level risk, secure-by-design architecture reviews, risk communication and governance, and partnership with engineering teams across financial-services systems. Candidates generally need 5–8 years of cybersecurity experience focused on threat modeling, application/product security, or security architecture, plus cloud, identity, API, infrastructure, and security-framework expertise.

Required Skills

Threat modeling
Attack surface analysis
SaaS security
Identity management
Cloud security
Kubernetes
OWASP
Secure SDLC
Terraform
Risk communication

Additional Information

Minimum Education: Bachelor's degree in a related field or equivalent practical experience
Required Previous Experiences: 5 to 8 years of cybersecurity experience focused on threat modeling, application/product security, or security architecture
Hands-on experience threat modeling modern and traditional systems using STRIDE or PASTA and DFDs
Experience with cloud-native and on-premises architectures, multi-tenancy, APIs, microservices, networks, infrastructure, and identity flows
Preferred Qualifications: Financial services or regulated-industry experience
Experience with IriusRisk, OWASP Threat Dragon, Microsoft Threat Modeling Tool, or ThreatModeler
DevSecOps, Terraform, Kubernetes, or secure code review experience
AI/ML or LLM application threat-modeling experience
CSSLP, CCSP, CISSP, or cloud-security certification