Security Engineer at An E-commerce Unicorn

Responsibilities

• Lead organization-wide security initiatives, collaborating closely with development teams to ensure robust security.
• Work with security development teams to design and implement security solutions across the enterprise using Python and Java.
• Serve as the trusted security subject matter expert (SME), working with development and product teams to create and launch secure products and features for customers, suppliers, partners, and employees.
• Integrate security into the DevSecOps workflow.
• Perform risk analysis, threat modeling, and penetration testing on complex services to build secure products from the ground up.
• Provide training and updates to development teams on secure coding practices and emerging trends in security.
• Create runbooks and maintain a knowledge base to support secure development practices among developers.
• Manage external hackers through the Bug Bounty Program to identify vulnerabilities.
• Oversee the maintenance, tuning, and management of the web application firewall (WAF).

Requirements

• Experience with secure application development or Secure SDLC.
• Hands-on scripting experience in Python.
• Experience securing k8s, REST, and GraphQL services with a deep understanding of securing microservice architectures.
• Experience securing any of these cloud services platforms - GCP (Preferred), AWS, and Azure.
• Understanding of Authentication mechanisms such as SAML, JWT, OAuth, etc.
• Understanding of build and release management, and CI/CD platforms.
• Experience securing any of these cloud services platforms - GCP, AWS, Azure.
• Understanding of Authentication mechanisms such as SAML, JWT, OAuth, etc.
• Cloud Security Certifications are a plus.
• We would love to see experience with WAF, the Bug Bounty Program, and Open source security tools.

Perks and benefits

• Medical Insurance
• Internet Reimbursement
• Flexible working hours
• Unlimited leave policy