Senior Software Engineer - Information Security

We are looking for a bright and exceptional SSE/Lead Engineer to join our information security team in Bangalore/Gurugram.

What youll do:

• Conduct manual penetration testing on web applications and other systems.
• Demonstrate and promote security best practices, including secure development and cloud security
• Assist with the development of remediation recommendations for identified findings
• Identify and articulate (written and verbal) findings to the development teams
• Stay up-to-date with the latest security trends, technologies, and best practices

What youll need:

• 3-7 Years, out of which at least 3+ years in the security engineering field
• B.E/B.Tech or M.Tech/MS: Degree in computer science engineering or related field
• Technical background in Application Security Testing, Security Code Reviews, and security design reviews
• Knowledge of common application security attacks (e.g. Deserialization attacks, Injections attacks, SSRF, XSS, SQL Injection, XSRF, buffer overruns, DoS, etc)
• Prior experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools and using them for Application Security reviews.
• Experience in Cloud Security - AWS is an added advantage, and Kubernetes and Docker container security
• Technical familiarity with technologies like Java, Python, React, GraphQL, Javascript, JSON, REST, Docker, Terraform, etc.
• Encryption and Key Management
• Must have Experience with Java programming language.
• Strong understanding of security fundamentals and general security technologies.
• Excellent communicator, comfortable discussing with technical staff and management.
• Strong interpersonal skills as well as excellent written and verbal communication skills
  
  Good to have Skills:
• SAST/DAST integration in CI/CD pipeline - design, implementation
• Experience working with Gitlab
• Certifications like OCSP, OSWE or OSWA