Add office photos
All Filters
116 Highpoints Technologies India Jobs
Security Engineer - L3
5-8 years
Kolkata, Mumbai, New Delhi + 4 more
1 vacancy
Security Engineer - L3
Highpoints Technologies India
posted 3mon ago
Job Role Insights
Flexible timing
Key skills for the job
Job Description
- Follow Attack Surface management processes to continuously monitor and improve visibility of the attack surface in order to detect anomalies faster and reduce incidences of cyber-attacks
- Perform verification/validation testing for vulnerabilities in external-facing websites, web applications, and services; demonstrate exploitation steps and verify remediation/fixes
- Generate comprehensive reports, including detailed findings, exploitation procedures, and mitigation techniques
- Engage with business stakeholders to ensure they fully understand their Attack Surface and help them identify the prioritization of vulnerabilities.
- Develop vulnerability KPIs/metrics to demonstrate coverage and remediation effectiveness
- Execute daily operations of the Attack Surface Management program, including the interpretation of scanning results
- Assist in the identification of internal and external risks based on scanning results
- Assist in the attribution of findings to the appropriate business owner
- Identify improvements to scan coverage
- Coordinate with IT and geographically dispersed business units vulnerability remediation and mitigation strategies
- Assist in the documentation and standardisation of process and procedures related to Attack Surface Mgmt
- Aggregating vulnerability data across technologies such as endpoints, servers, network equipment, and cloud and interpreting and presenting risk.
- 5-8 years experience in Attack Surface Management or Vulnerability Assessment and Penetration Testing for Infrastructure, Networks, Web Applications, Web Services/API, Databases etc.
- Relevant Experience as a Security Incident Responder or SOC analyst
- Familiarity with common web vulnerabilities including XSS, XXE, SQL Injection, Deserialization Attacks, Path Traversal Attacks, Remote Execution Flaws, and Authentication Flaws
- Understanding of common web application frameworks and web-based APIs
- Experience with one or more scripting languages such as Bash, Python, Perl, PowerShell, etc.
- In-depth knowledge of architecture, engineering, and operations of one or more vulnerability management tools, such as Wiz, Qualys, Rapid7 and ServiceNow.
- Solid understanding of the application of the following frameworks and how they are applied to identifying and rating risk: OWASP, SANS, NIST, CIS, and MITRE ATTCK.
- Ability to provide creative solutions to complex problems
- Ability to clearly communicate risk of vulnerabilities to all levels within an organization.
- Knowledge of major cloud platforms (AWS, Azure, or GCP).
- Knowledge of systems hardening and other risk mitigation factors on multiple technologies and operating systems (Window, Linux, Mac, routers, switches, Kubernetes).
- Industry Standard Certification like CISSP, Security+, CEH, GIAC certifications would be a huge plus.
- Ability to manage, organize, analyze, and present substantial amounts of data
- Experience selecting and deploying products
- BE/BTech in Computer Engineering / Electronics Communications Engineering or their equivalent
Employment Type: Full Time, Permanent
Read full job descriptionPrepare for Security Engineer roles with real interview advice
What people at Highpoints Technologies India are saying
What Highpoints Technologies India employees are saying about work life
Highpoints Technologies India Benefits
View more benefits
Compare Highpoints Technologies India with
Infosys
TCS
Wipro
HCLTech
Tech Mahindra
LTIMindtree
Mphasis
Hexaware Technologies
Persistent Systems
Marpu Foundation
Huawei Technologies
HCL Infosystems
Exotic Learning
JioMart
Karma Ayurveda
Evision Technoserve
InternEzy
Cogoport
Lea Associates South Asia
Creambell
Architecture/Design/Development - Business Systems Analyst II.
2-4 Yrs
Kolkata, Mumbai, New Delhi +4 more
IT Consulting / Projects - Systems Administrator III
5-8 Yrs
Kolkata, Mumbai, New Delhi +4 more
Accounting / Operations - Accountant.
3-5 Yrs
Kolkata, Mumbai, New Delhi +4 more
Human Resources/Training - HR Coordinator I.
0-3 Yrs
Kolkata, Mumbai, New Delhi +4 more
Network/Operations - Technical Support I
1-2 Yrs
Kolkata, Mumbai, New Delhi +4 more
Accounting/Operations - Accountant
2-5 Yrs
Kolkata, Mumbai, New Delhi +4 more
