Security Engineer at Delta Exchange - Remote India — Columbus
Traveler-Friendly Insight
Remote Work Reality: This role is positioned as a dedicated, hands-on security engineer embedded within a ~250-person crypto derivatives company. The job description does not mention remote work, flexible hours, or async culture — signals that suggest this may be an in-office or hybrid role based in India.
Timezone Constraints: No explicit timezone is listed, but given Delta Exchange's India-based operations and founding team background, working hours are almost certainly aligned with IST (UTC+5:30). This limits async flexibility significantly for nomads based in the Americas or Western Europe.
Visa Considerations: The location hint points to India. Non-Indian nationals would face significant work visa hurdles — India does not currently offer a widely accessible digital nomad visa. Indian nationals working remotely within India have the most straightforward path.
Nomad Cost-of-Living Comparison: No salary is disclosed, making direct comparisons difficult. However, senior security engineers in India typically earn ₹25–50 LPA (~$30K–$60K USD). At that range:
- Bengaluru/Mumbai (India): Competitive local salary, comfortable lifestyle at upper range.
- Lisbon, Portugal: $30K–$60K would be tight for a comfortable nomad lifestyle (avg. $2,500–$3,500/month needed).
- Bangkok, Thailand: More feasible — costs of ~$1,500–$2,000/month leave solid disposable income at the upper salary band.
If you're a digital nomad seeking location-independent opportunities in fintech security, look for roles that explicitly state "fully remote" and list async-first culture as a priority.
About the Company
At Delta, we are re-imagining and re-building the financial system. Join our team to make a positive impact on the future of finance.
- 🎯 Mission Driven: Re-imagine and re-build the future of finance.
- 💡 Most innovative cryptocurrency derivatives exchange. With a daily traded volume of ~$0.5 billion and increasing — Delta is bigger than all Indian crypto exchanges combined.
- 📈 Offers the widest range of derivative products and has been serving traders worldwide since 2018, growing fast.
- 💪 The founding team comprises IIT and ISB graduates. Business co-founders have previously worked with Citibank, UBS, and GIC; the tech co-founder is a serial entrepreneur who previously co-founded TinyOwl and Housing.com.
- 💰 Funded by top crypto funds (Sino Global Capital, CoinFund, Gumi Cryptos) and crypto projects (Aave and Kyber Network).
About the Role
You'll be the dedicated security engineer at a derivative exchange (~250 people, 50–100 person dev team). All infrastructure is on AWS. DevOps builds it; you make sure it's secure and can prove it. You'll be hands-on — reviewing Terraform PRs for security gaps, building automated drift detection, writing SIEM rules, and owning the credential lifecycle.
When the CTO asks, "Are we secure?" you pull up a dashboard, not a slide deck. You own the security posture of the infrastructure — from shaping how access and controls are modelled, to verifying they hold in practice.
What You'll Do
- Verify that infra implementations match the security model — continuously, not quarterly.
- Build automated compliance checks and drift detection (AWS Config, Steampipe, custom tooling, whatever works).
- Review Terraform PRs for IAM, SCP, and network security gaps before they hit production.
- Own credential lifecycle: rotation, PAM, JIT access, session recording.
- Write and tune detection rules in OpenSearch SIEM.
- Build evidence dashboards that prove security posture to non-security leadership.
- Evaluate security tooling (build vs. buy) and own the recommendation with documented tradeoffs.
Must-Haves
- 5+ years in infrastructure or security engineering, with at least 2 years focused on AWS security.
- IAM expertise beyond basic roles — you understand policy evaluation logic, permission boundaries, and cross-account access patterns.
- Experience building automated security checks that run in production (any tooling).
- Ability to read and critically review Terraform for security posture.
- Experience operating PAM tooling or credential rotation in production (any tool).
- Comfortable owning a security domain end-to-end without constant direction.
Strong Advantages
- Worked at an org <500 people where you were one of the very few (or the only) security engineers.
- Multi-account AWS Organizations / SCP experience.
- Wrote SIEM detection rules in production (any platform — OpenSearch, Splunk, Elastic, etc.).
- Regulated fintech, exchange, or payments background.
- Built security evidence/reporting that non-security people actually used.