-
Security Assurance
-
Information Security, Experience : 5 + years, Opening : 1 Member
-
Overview :
-
We are hiring an Information Security Sr. Engineer in our growing InfoSec team. You will
-
establish procedures, design and implement technical controls to ensure information
-
systems meet security objectives.
-
To do well in this role you should have working experience in penetration testing of Web &
-
Mobile applications and Infrastructure, Network, Perimeter and Endpoint Security.
-
Responsibilities :
-
? Assist software development teams in securely architecting/operating their software
-
applications by aligning to secure software development principles, industry standard
-
methodologies, compliance and privacy requirements.
-
? Perform security assessment of web applications, Android, iOS mobile applications.
-
Carry out the manual and automated security assessments - SAST & DAST.
-
? Define the Architecture and Design elements of implementation of security solutions.
-
? Define Baseline Security configuration, build continuous visibility for detecting
-
misconfigurations and vulnerabilities, and mature remediation patch management
-
practises. Perform Threat modeling exercise.
-
? Drive adoption of AWS Well-Architected Framework, Defense in Depth and Zero-
-
trust architecture model.
-
? Conduct Proof of Concept evaluation of emerging technologies and security tools.
-
Requirements :
-
? Inclination towards learning multiple areas of security and building competency to
-
deliver a wide spectrum of security like application security, cloud security and data
-
leakage prevention.
-
? In-depth knowledge of security vulnerabilities not just limited to OWASP Top 10
-
? Strong understanding of network concepts including TCP/IP, HTTP and TLS, WAF,
-
DDoS detection/prevention, and network & host anomaly detections.
-
? self-motivated and comfortable working in a fast-paced environment with a sense of
-
ownership.
-
? Good to have Certifications: OSCP, AWS Certified Security Specialist, AZ-500