Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

For Employers

Add office photos

Employer? Claim Account for FREE

Highpoints Technologies India

Compare

4.9

based on 7 Reviews

105 Highpoints Technologies India Jobs

Security Engineer - L3

HighPoints Technologies India Private Limited

4.9

based on 7 Reviews

5-8 years

Kolkata, Mumbai, New Delhi + 4 more

1 vacancy

Security Engineer - L3

Highpoints Technologies India

posted 5mon ago

Job Role Insights

Flexible timing

Key skills for the job

SQL Cloud Computing Linux Administration Penetration Testing Vulnerability Management Perl

+ 4 more

Job Description

Follow Attack Surface management processes to continuously monitor and improve visibility of the attack surface in order to detect anomalies faster and reduce incidences of cyber-attacks
Perform verification/validation testing for vulnerabilities in external-facing websites, web applications, and services; demonstrate exploitation steps and verify remediation/fixes
Generate comprehensive reports, including detailed findings, exploitation procedures, and mitigation techniques
Engage with business stakeholders to ensure they fully understand their Attack Surface and help them identify the prioritization of vulnerabilities.
Develop vulnerability KPIs/metrics to demonstrate coverage and remediation effectiveness
Execute daily operations of the Attack Surface Management program, including the interpretation of scanning results
Assist in the identification of internal and external risks based on scanning results
Assist in the attribution of findings to the appropriate business owner
Identify improvements to scan coverage
Coordinate with IT and geographically dispersed business units vulnerability remediation and mitigation strategies
Assist in the documentation and standardisation of process and procedures related to Attack Surface Mgmt
Aggregating vulnerability data across technologies such as endpoints, servers, network equipment, and cloud and interpreting and presenting risk.

Candidate Profile

5-8 years experience in Attack Surface Management or Vulnerability Assessment and Penetration Testing for Infrastructure, Networks, Web Applications, Web Services/API, Databases etc.
Relevant Experience as a Security Incident Responder or SOC analyst
Familiarity with common web vulnerabilities including XSS, XXE, SQL Injection, Deserialization Attacks, Path Traversal Attacks, Remote Execution Flaws, and Authentication Flaws
Understanding of common web application frameworks and web-based APIs
Experience with one or more scripting languages such as Bash, Python, Perl, PowerShell, etc.
In-depth knowledge of architecture, engineering, and operations of one or more vulnerability management tools, such as Wiz, Qualys, Rapid7 and ServiceNow.
Solid understanding of the application of the following frameworks and how they are applied to identifying and rating risk: OWASP, SANS, NIST, CIS, and MITRE ATTCK.
Ability to provide creative solutions to complex problems
Ability to clearly communicate risk of vulnerabilities to all levels within an organization.
Knowledge of major cloud platforms (AWS, Azure, or GCP).
Knowledge of systems hardening and other risk mitigation factors on multiple technologies and operating systems (Window, Linux, Mac, routers, switches, Kubernetes).
Industry Standard Certification like CISSP, Security+, CEH, GIAC certifications would be a huge plus.
Ability to manage, organize, analyze, and present substantial amounts of data
Experience selecting and deploying products
BE/BTech in Computer Engineering / Electronics Communications Engineering or their equivalent