Total 8 job vacancies by Amartha

About the Role

The Associate Software Security Engineer plays an essential role in protecting Amartha from evolving cyber threats. You will be part of our dynamic security team, focusing on identifying and mitigating security risks across our technology stack.

About the Team

Our Information Security team consists of dedicated security professionals who prioritize security and privacy by design. We work closely with development teams to enable secure product development while maintaining operational efficiency.

Primary Responsibilities

- Execute vulnerability assessments and penetration tests across web applications, APIs, and mobile platforms

- Implement and maintain security controls in cloud environments (GCP, AWS)

- Develop automation scripts and tools to enhance security processes

- Perform security code reviews and threat modeling

- Support our bug bounty program through triage and validation

- Monitor systems for security anomalies and investigate potential incidents

- Collaborate with development teams to remediate security findings

Growth & Development

- Mentorship from experienced security engineers

- Certification and training support

- Hands-on experience with modern security tools and challenges

- Clear career advancement path within the security team

Required Skills

- 2+ years of hands-on security testing or software development experience

- Strong understanding of web security fundamentals and OWASP Top 10

- Proficiency in at least one scripting/programming language (Python, Bash, or Go)

- Experience with security testing tools (Burp Suite, OWASP ZAP)

- Basic understanding of cloud security concepts

- Ability to clearly communicate technical findings to various stakeholders

- Fast learner with passion for cybersecurity

- Self-motivated to stay updated with security trends and threats

Preferred Qualifications

- Security certifications (eJPT, OSCP, CEH)

- Experience with cloud platforms (AWS, GCP)

- Knowledge of CI/CD pipelines and DevSecOps practices

- Mobile application security testing experience

- Familiarity with infrastructure as code (Terraform, Ansible)

Technical Environment

- Security Tools: Burp Suite, Metasploit, Nmap, MobSF, Frida

- Development Tools: Git, GitHub, Jenkins

- Cloud Platforms: AWS, GCP

- Programming Languages: Python, Bash, Go

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats through various security assessment activities (including but not limited to: . penetration testing, vulnerability assessment, etc)
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable (e.g.  CEH,OSCP, eCPPT, Ejpt etc)
• Advance knowledge in  API Security, Mobile/Application Security, Cloud Security
• Advance knowledge in security adversarial techniques, tactics, and procedures
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash, Go
• Highly skilled with strong hands-on experience with various security assessment tools such as Metasploit, BurpSuite, ZAP, OWASP tools, Hydra, Netsparker, Wireshark, Apktool, nikto, Cloudbrute , Kali Linux tools, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF

We are seeking a highly skilled and experienced Legal Counsel to join us as a key member to our legal team.

The ideal candidate will have a strong background in corporate law and transactional matters, with a focus on M&A, joint ventures, investments, fund-raising, and general corporate commercial issues. In addition, you will be responsible for managing external counsel, providing guidance on data privacy matters, and demonstrating exceptional stakeholder management skills. This is a newly created headcount.

Responsibilities

• Provide expert legal advice and guidance on various transactional matters, including M&A, joint ventures, investments, fund-raising, and other corporate transactions.
• Advise on general corporate commercial matters, including drafting and negotiating contracts, agreements, and other legal documents.
• Collaborate closely with internal stakeholders to assess and manage legal risks, ensuring compliance with applicable laws and regulations.
• Conduct due diligence and risk assessments for potential transactions, identifying legal issues and proposing strategic solutions.
• Manage relationships with external counsel, instructing and overseeing their work as necessary.
• Stay abreast of legal developments, industry trends, and regulatory changes that may impact the business, and provide proactive advice and recommendations to the General Counsel and other stakeholders.
• Demonstrate maturity, discretion, and professionalism in handling sensitive and confidential information.

• Should have at least a bachelor’s degree in law.
• Able to communicate in English (writing and verbal)
• Should have at least of 5 years in a reputable law firm and/or relevant in-house legal department, with a focus on corporate law and transactional matters.
• Strong experience in advising on M&A, joint ventures, investments, fundraising, and other transactional matters.
• Solid understanding of general corporate commercial issues and the ability to provide pragmatic legal solutions.
• Knowledge of data privacy laws and regulations, with experience advising on related matters.
• Excellent drafting, and communication skills.
• Demonstrated ability to manage external counsel effectively.
• Strong stakeholder management skills, with the ability to work collaboratively with cross-functional teams and build relationships at all levels of the organization.
• Exceptional analytical and problem-solving skills, with attention to detail.
• Ability to work independently, prioritize tasks, and manage multiple projects simultaneously.
• Demonstrated professionalism, integrity, and discretion in handling confidential information.

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats through various security assessment activities (including but not limited to: . penetration testing, vulnerability assessment, etc)
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable (e.g.  CEH,OSCP, eCPPT, Ejpt etc)
• Advance knowledge in  API Security, Mobile/Application Security, Cloud Security
• Advance knowledge in security adversarial techniques, tactics, and procedures
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash, Go
• Highly skilled with strong hands-on experience with various security assessment tools such as Metasploit, BurpSuite, ZAP, OWASP tools, Hydra, Netsparker, Wireshark, Apktool, nikto, Cloudbrute , Kali Linux tools, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF

About the Role 

The Senior Cloud Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats over the cloud-based infrastructure
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Enhance the effectiveness of cloud security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable 
• Familiarity with Cloud Security concepts, principles, and technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Experienced in scripting using Python, Bash scripting
• Familiar with a variety of DevSecOps toolkits, including Ansible, Jenkins, Artifactory, Jira, Terraform, Git/Version Control Software, or comparable technologies
• Familiar with a variety of Pentesting toolkits, including BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF, or comparable technologies
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, Nessus, NMap, Metasploit

About the Role:
As a Legal and Compliance Intern at Amartha Group, you will play a crucial role in ensuring the smooth functioning and regulatory compliance of the company. Your responsibilities will encompass various legal and administrative tasks that are essential for the organization. You will assist in managing and maintaining company documents, preparing important corporate documents such as Circular Resolutions and BOD/BOC Approvals, and closely monitoring the company's permits. Additionally, you will support the Litigation team by providing necessary documents for trials and LAPS. This role offers a comprehensive experience in the legal and compliance aspects of the business.

Job Description:

• Assist in maintaining Amartha Group documents.
• Prepare corporate documents (Circular Resolutions, BOD and BOC Approvals).
• Monitor Amartha Group's permits.
• Support the Litigation team with documents needed for trials/LAPS.

• Final-year student or Fresh graduate in bachelor degree of Law from reputable university with minimum GPA 3.00
• Have an excellent ability in identifying problems, strong conceptual and analytical thinking
• Must be mature, resourceful, self-motivated and result-oriented
• Good command in English and computer literate is a must

• Prepare draft and review any legal documents (agreements, confirmation letter, amendments/addendums, side letters, etc.) within the company
• Conduct legal research and provide advisory related to the company's operational and business activities
• Maintain legal database (company documents/company licensing) and organize executed versions of agreements
• Handle general corporate matters, liaise with public notaries, external lawyers, and government authorities in relation to general corporate, licensing of companies, and corporate secretarial matters
• Work closely with relevant business units on new product launches, licensing and compliance matters and all other strategic legal matters
• Prepare administration of general meeting of shareholders
• Analyst and implement relevant laws and regulations to provide updated agreements, company regulations, etc
• Support any related jobs assigned by Legal & Compliance Sr. Lead, Legal & Compliance Head and/or business stakeholders.

• A bachelor’s degree from a reputable university
• 3-4 or more years of legal experience in a corporate setting, background from financial and/or technology company setting would be a plus
• Experience in drafting business contract and contract negotiation
• Being fluent in English (written and oral) is a must
• Attain multitasking and time management skills, with the ability to prioritize tasks
• Strong stakeholder management skills, with the ability to work collaboratively with cross-functional teams and build relationships at all levels of the organization
• Display commercial acumen and the ability to balance legal considerations with business objectives
• Exceptional analytical and problem-solving skills, with attention to detail
• Ability to work independently, prioritize tasks, and manage multiple projects simultaneously
• Demonstrated professionalism, integrity, and discretion in handling confidential information.

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable 
• Familiarity with API Security, Mobile/Application Security, Cloud Security
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash scripting
• Familiar with a variety of DevSecOps toolkits, including Ansible, Jenkins, Artifactory, Jira, Terraform, Git/Version Control Software, or comparable technologies
• Familiar with a variety of Pentesting toolkits, including BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF