What you will do

<ul>
<li style="margin-left:17px;">Lead and manage all aspects of the Secure Software Development Lifecycle (SDLC).</li>
</ul>

<ul>
<li style="margin-left:17px;">Implement and manage security tools within the CI/CD pipeline (DevSecOps).</li>
</ul>

<ul>
<li style="margin-left:17px;">Conduct and oversee VAPT for web applications, APIs, iOS, and Android apps.</li>
</ul>

<ul>
<li style="margin-left:17px;">Perform threat modeling, design, and architecture reviews to identify potential risks.</li>
</ul>

<ul>
<li style="margin-left:17px;">Execute manual source code reviews and enhance security in production environments.</li>
</ul>

<ul>
<li style="margin-left:17px;">Manage and optimize a self-managed bug bounty program.</li>
</ul>

<ul>
<li style="margin-left:17px;">Provide security architectural guidance to Engineering and IT teams.</li>
</ul>

<ul>
<li style="margin-left:17px;">Manage issues identified from penetration tests and bug bounty programs.</li>
</ul>

<ul>
<li style="margin-left:17px;">Lead security training and awareness campaigns across the organization.</li>
</ul>

<ul>
<li style="margin-left:17px;">Manage Web Application Firewalls (WAF) to ensure robust protection.</li>
</ul>

<ul>
<li style="margin-left:17px;">Engage in the Security Champions program to integrate security practices within teams.</li>
</ul>

<ul>
<li style="margin-left:17px;">Assist in creating and maintaining Security Risk Models for both new and existing systems.</li>
</ul>

<h3 style="margin-left:0px;">What you will need</h3>

<ul>
<li style="margin-left:17px;">7+ years of experience in product security, with a focus on application security and Dev SecOps.</li>
</ul>

<ul>
<li style="margin-left:17px;">Proven experience in leading architectural changes or cross-team efforts to mitigate security vulnerabilities.</li>
</ul>

<ul>
<li style="margin-left:17px;">Proficiency in programming languages such as Java, React, Node.js, and Python.</li>
</ul>

<ul>
<li style="margin-left:17px;">Hands-on experience with manual source code reviews and securing production code.</li>
</ul>

<ul>
<li style="margin-left:17px;">Expertise in deploying and managing security tools in CI/CD pipelines.</li>
</ul>

<ul>
<li style="margin-left:17px;">Experience with Git, Jenkins, Artifactory, or other similar technologies.</li>
</ul>

<ul>
<li style="margin-left:17px;">Strong background in securing the software development lifecycle, including eliminating classes of vulnerabilities.</li>
</ul>

<ul>
<li style="margin-left:17px;">Proficiency with cloud platforms like AWS or GCP, including their security tools.</li>
</ul>

<ul>
<li style="margin-left:17px;">Experience with Docker and containerization technologies is highly desirable.</li>
</ul>

<ul>
<li style="margin-left:17px;">Additional experience in infrastructure security, particularly in GCP, Docker, and containerization, is a bonus.</li>
</ul>

<h3 style="margin-left:0px;">Bonus Points</h3>

<ul>
<li style="margin-left:17px;">Relevant certifications such as GIAC Web Application Penetration Tester (GWAPT), OffSec’s Advanced Web Attacks and Exploitation (WEB-300), etc.</li>
</ul>

<ul>
<li style="margin-left:17px;">Strong understanding of SSO protocols, including OAuth and SAML.</li>
</ul>

<ul>
<li style="margin-left:17px;">Experience speaking at meetups or conferences.</li>
</ul>

<ul>
<li style="margin-left:17px;">Experience participating in bug bounty programs. </li>
</ul>

Security Engineer

What you will do Lead and manage all aspects of the Secure Software Development Lifecycle (SDLC). Implement and manage security tools within the CI/CD pipeline (DevSecOps). Conduct and oversee VAPT for web applications, APIs, iOS, and Android apps. Perform threat modeling, design, and architecture reviews to identify potential risks. Execute manual source code reviews and enhance security in production environments. Manage and optimize a self-managed bug bounty program. Provide security architectural guidance to Engineering and IT teams. Manage issues identified from penetration tests and bug bounty programs. Lead security training and awareness campaigns across the organization. Manage Web Application Firewalls (WAF) to ensure robust protection. Engage in the Security Champions program to integrate security practices within teams. Assist in creating and maintaining Security Risk Models for both new and existing systems. What you will need 7+ years of experience in product security, with a focus on application security and Dev SecOps. Proven experience in leading architectural changes or cross-team efforts to mitigate security vulnerabilities. Proficiency in programming languages such as Java, React, Node.js, and Python. Hands-on experience with manual source code reviews and securing production code. Expertise in deploying and managing security tools in CI/CD pipelines. Experience with Git, Jenkins, Artifactory, or other similar technologies. Strong background in securing the software development lifecycle, including eliminating classes of vulnerabilities. Proficiency with cloud platforms like AWS or GCP, including their security tools. Experience with Docker and containerization technologies is highly desirable. Additional experience in infrastructure security, particularly in GCP, Docker, and containerization, is a bonus. Bonus Points Relevant certifications such as GIAC Web Application Penetration Tester (GWAPT), OffSec’s Advanced Web Attacks and Exploitation (WEB-300), etc. Strong understanding of SSO protocols, including OAuth and SAML. Experience speaking at meetups or conferences. Experience participating in bug bounty programs.

Security Engineer in Varthur (UID-14220)

Job Description

Job Details

Skills Required for Security Engineer

Job Description for Security Engineer

Explore More Opportunities