Security Engineer
Raise the bar for Security Engineering at Frappe by improving code and infra that powers thousands of sites.

What you will be working on

  1. Triaging, patching and disclosing issues reported by community researchers and our third-party security consultants.
  2. You will be primarily working on securing the following Frappe products:
  3. Frappe Framework (Our low-code web framework)
  4. Frappe Cloud (Our infrastructure/platform)
  5. ERPNext (Our flagship product)
  6. Frappe HR
  7. And other products in collaboration with product owners.
  8. Continuous code audits and pentesting for discovering and preventing security vulnerabilities.
  9. Ensuring compliance with ISO 27000 and working towards future compliance needs (like SOC 2)

What we are looking for

  1. Someone with strong technical knowledge in Python, SQL and JavaScript.
  2. 2-3 years of experience in the field of web development.
  3. You should be passionate about deeply understanding how things work and how to make them better.
  4. You should love tinkering and poking holes in systems.
  5. Ability to discover AND patch SQLi, XSS, command-injection, authentication and authorization/ACL flaws, and other web-based security vulnerabilities (OWASP Top 10 and beyond).
  6. Strong communication and collaboration skills to work with other Frappe engineers and external stakeholders.
  7. Prior code audit experience is a big plus. We are a 100% open-source company, so you'll be inspecting code much more than doing black-box pen-testing.
  8. Prior exposure to security engineering will be a huge plus but it's not a mandatory requirement.

Salary Range

  1. This is a mid-level position.
  2. The salary range for this position is INR 14-18 LPA.

Back to open positions