Fampay
Security Engineer Intern at Fampay
Fampay is hiring a Security Engineer Intern in Bengaluru. The role details below come from the employer’s posting. You apply on the employer’s own site, and TechJobs360 never charges candidates.
On this page
1. Job details
Fampay
Security Engineer Intern
Bengaluru
Not disclosed by employer
See the job description
On the employer’s site
2. Job description from Fampay
About Fam (previously FamPay)
Fam is India's first payments app for everyone above 11. FamApp helps make online and offline payments through UPI and FamCard. We are on a mission to raise a new, financially aware generation, and drive 250 million+ youngest users in India to kickstart their financial journey super early in their life.
Founded in 2019 by IIT Roorkee alumni, Fam is backed by some of the most respected investors around the world like Elevation Capital, Y-Combinator, Peak XV (Sequoia Capital) India, Venture Highway, Global Founder’s Capital and the likes of Kunal Shah, Amrish Rao as angel investors.
About the Role
We are looking for a Security Enthusiast who thinks like a hacker but works for the good guys. You shouldn't just find bugs; you should be obsessed with understanding why they exist and how to fix them for good.
As an Application Security Engineer Intern, you will be the first line of defense for the Fam. You will break things before the bad guys do, automate security checks, and work side-by-side with our engineering team to build a fortress around our users' hard-earned money.
If you get a rush from finding an RCE, live on r/netsec, or spend your weekends capturing flags or bounties, this role is for you.
Note: This is an onsite internship at Fam HQ, Bangalore.
Curious to know about FamPay's tech stack? Click here to know what makes and keeps Fam running!
On the Job
- Break the App: Perform vulnerability assessments and penetration testing (VAPT) on our Web Applications, Android/iOS Apps, and APIs.
- Automate Defense: Help integrate security tools (SAST/DAST) into our CI/CD pipelines. We believe security should move as fast as our code.
- Code Review: Review source code for security flaws (like SQLi, XSS, IDOR) and help developers write secure code from day one.
- Bug Triage: Analyze incoming bug reports from our Bug Bounty programs, validate them, and prioritize fixes.
- Threat Modeling: Work with product and engineering teams during the design phase to identify potential security risks before a single line of code is written.
- Learn & Evolve: Stay updated with the latest CVEs, zero-days, and security trends.
Who you are
- The Hacker Mindset: You have a deep understanding of the OWASP Top 10 (Web & Mobile) and know how to exploit and patch them.
- Tool Wizardry: Hands-on experience with tools like Burp Suite , Metasploit , Nmap , Postman , or similar open-source security tools.
- Coding Chops: You can read code (Python, Go, Java, or JavaScript) and write scripts to automate attacks or defenses.
- Curiosity: You are a student of the game. You actively participate in CTFs , Bug Bounties , or have a rank on platforms like HackTheBox/TryHackMe.
- Communication: You can explain a complex vulnerability to a developer without sounding like a robot.
Bonus Points
- Experience with Cloud Security (AWS/GCP).
- A Hall of Fame mention in any major tech company's Bug Bounty program.
- Open source security contributions.
Why Join Us?
- Impact: You’ll be protecting the financial data of millions of teenagers. The bugs you find and fix will have a direct, real-world impact.
- Mentorship: Work directly with founding members and senior engineers who have built systems at scale.
- Perks: Competitive stipend, Certificate and Letter of Recommendation, Friendly leave policy, and cool Fam merchandise!
Ready to be part of the Fam? Apply Now and complete this challenge – https://ctf.fampay.co/
3. Skills that usually matter in software engineering roles
General guidance from TechJobs360, not part of Fampay’s posting. The job description above is what counts for this role.
| Area | What to be comfortable with |
|---|---|
| Languages | Java, Python, Go, C# or C++ |
| Frameworks & tools | A web framework, SQL and NoSQL databases, Git, cloud basics |
| Computer science basics | Data structures, algorithms, complexity |
| Ways of working | Version control, code review, testing, reading other people's code |
4. How to prepare for a Security Engineer Intern interview
Interview formats differ by company and team, so confirm the rounds with the recruiter. Most hiring loops for roles like this cover:
A recruiter call or an online test. Read the job description twice and be ready to explain how your experience matches it.
Often coding problems on arrays, strings, trees, graphs or dynamic programming, solved while you explain your thinking.
Often design and trade-off questions sized to the role: an API, a component, or a small system.
Answer with the STAR method (Situation, Task, Action, Result). Prepare two or three real stories: a hard problem you solved, a disagreement you handled, and something you learned quickly.
5. Take-home pay example (FY 2026–27, new tax regime)
An example for two common package sizes, not this job’s salary. Under the new tax regime (Section 115BAC) salaried employees get a standard deduction of ₹75,000.
| Component | Example: ₹12 LPA | Example: ₹24 LPA |
|---|---|---|
| Basic salary (40% of CTC) | ₹40,000 / mo | ₹80,000 / mo |
| Employee EPF (12% of basic) | -₹4,800 / mo | -₹9,600 / mo |
| Income tax (TDS) | -₹6,933 / mo | -₹32,450 / mo |
| Professional tax | -₹200 / mo | -₹200 / mo |
| Approx. in-hand | ₹81,344 / mo | ₹1,44,304 / mo |
Work out the take-home pay for your own offer, in either tax regime.
6. Questions and how to apply
How do I apply?
Use the apply button below. It opens Fampay’s own application page.
Does TechJobs360 recruit for this job or charge a fee?
No. We list openings from employers’ career sites. Fampay runs the hiring, and nobody should ask you to pay to apply.
Is this job still open?
We check listings against the employer’s page every day and take down jobs that have closed.
Should I apply if I don’t match every requirement?
Usually yes, if you meet most of the core requirements and can show you learn quickly. A referral from someone on the team can help your resume get read.
Apply for Security Engineer Intern at Fampay
Apply on the employer’s site →
To apply for this job please visit jobs.lever.co.