Add office photos

FirstHive

Compare

based on 16 Reviews

10 FirstHive Jobs

Information Security Lead

Firsthive

based on 16 Reviews

10-20 years

Bangalore / Bengaluru

1 vacancy

Information Security Lead

FirstHive

posted 5mon ago

Flexible timing

Key skills for the job

+ 3 more

10+ years of experience in information security, with a focus on ethical hacking and penetration testing.

Education: Bachelors or Masters degree in Computer Science, Information Security, or related field.

What is the role

We are seeking a talented and experienced Information Security Manager to join our team
The Information Security Manager will be responsible for overseeing and managing both cloud and product security initiatives
The ideal candidate will have a strong background in cloud security, product security, risk assessment, and vulnerability management, with a passion for driving security initiatives and collaborating with cross-functional teams

Key Responsibilities

Develop and implement comprehensive security strategies, policies, standards, and procedures for both cloud infrastructure and product security.
Oversee the implementation and maintenance of security controls to protect cloud environments, including SaaS, PaaS, and IaaS platforms.
Collaborate with cloud architects and engineering teams to ensure the security of cloud-based systems and services.
Conduct security assessments and audits of cloud environments to identify and mitigate security risks and vulnerabilities.
Manage security incidents and coordinate response activities to minimize impact and ensure timely resolution.
Develop and deliver security awareness training programs for employees to promote a culture of security.
Work closely with product development teams to integrate security best practices into the product lifecycle, including threat modelling, secure coding guidelines, and security testing.
Lead the product security incident response process, including triage, investigation, and resolution of security incidents and vulnerabilities.
Provide guidance and support to cross-functional teams on security-related matters, including security requirements, controls, and compliance.
Stay abreast of emerging threats, security technologies, and regulatory requirements, and provide recommendations for enhancing the security posture of our products, systems, and cloud infrastructure.

Preferred Qualifications, Skills & Experience

Basic Qualification:

bachelors or masters degree in Computer Science, Computer Engineering, or a related field.
8 to 14 years of experience in application security, including 3+ years in a supervisory role.
Strong understanding of cloud security principles, best practices, and technologies.
Experience with cloud security platforms and tools, such as AWS, Azure, or GCP.
Experience in securing SaaS, PaaS, and IaaS environments.
Experience with security assessments, risk management, and vulnerability management processes.
Strong programming/scripting skills in languages such as Java, Ruby, and Python.
Ability to automate security testing processes and enhance productivity in security assessments.
Comprehensive understanding of web frameworks and architecture.
Effective communication skills to convey security vulnerabilities to diverse audiences, including development and management teams.

Advanced Qualification:

Published CVEs / research papers/articles about the security of the application layer and related protocols.
Experience in integrating and automating security in DevOps through implementing/building orchestration tools.
Good security development experience in any programming language

Employment Type: Full Time, Permanent

Prepare for Information Security Lead roles with real interview advice