Software Security Engineer - CDOT - Delhi

Min 65 % in (B.E/B.Tech in CSE/IT or equivalent stream from a recognized college/university) preferably with CISSP (Certified Information Systems Security Professional) certification

Role

Software Security Professionals

Location

New Delhi

Required Resources

Qualification

Min 65% in (B.E/B.Tech in CSE/IT or equivalent stream from a recognized college/university) preferably with CISSP (Certified Information Systems Security Professional) certification

Minimum Experience

2 years of professional work experience post qualification.

Roles & Responsibilities

• Implement, test and operate advanced software security techniques in compliance with technical reference architecture
• Perform on-going security testing and code review to improve software security
• Troubleshoot and debug issues that arise
• Provide engineering designs for new software solutions to help mitigate security vulnerabilities
• Contribute to all levels of the architecture
• Maintain technical documentation
• Consult team members on secure coding practices
• Develop a familiarity with new tools and best practices

Skills

• Detailed technical knowledge of techniques, standards and state-of-the art capabilities for authentication and authorization, applied cryptography, encryption algorithms and methodologies, Blockchain, security vulnerabilities and remediation
• Proficiency with languages such as C/C++, Java, Ruby, PHP, MySQL, SQL, and Python
• Proficiency in at least one of the following: JavaScript, Ajax, jQuery, HTML, CSS, Bootstrap
• Understanding of object-oriented programming
• Good understanding of Linux and Shell Scripting
• Deep understanding of data structure and operating system
• Deep understanding of Protocols TCP/IP, UDP, SNMP; inter-process communication (IPC) and Socket programming in multi-threaded environment.
• Experience/Knowledge of RESTful APIs
• Must be able to manage and analyze the security information and event management (SIEM) tools and services.
• Shall be able to create automation with the SIEM and take the real-time analysis produced from alerts and translate that into incident response plans.
• Must be able to improve the security of the application by finding, fixing, and preventing its vulnerabilities during the software development lifecycle (SDLC) so that vulnerabilities are addressed before an application is deployed.
• Practical knowledge of system architectures, networking and embedded systems
• Sound knowledge of application security and encryption
• Experience in application firewall for DdoS.
• Experience of XSS, XSRF
• Experience in backup strategies.
• Experience in OLP.
• Experience in access control.
• Experience in zero trust
• Experience in segmentation and continuity

Skills

• Understanding of Microservices based architecture, Containerization and Container Orchestration tools (Docker & Kubernetes), Architecting Micro service applications from security standpoint

• CISSP (Certified Information Systems Security Professional)