Soc Engineer (red Teaming & Web Application Security Specialist)
- Hitachi Digital
- 7 - 13 years
- Noida, Gurugram
- 4 months ago
- Email to a friend
- Report this job
Job Description
Our CompanyWere Hitachi Digital, a company at the forefront of digital transformation and the fastest growing division of Hitachi Group
Were crucial to the companys strategy and ambition to become a premier global player in the massive and fast-moving digital transformation market, Our group companies, including GlobalLogic, Hitachi Digital Services, Hitachi Vantara and more, offer comprehensive services that span the entire digital lifecycle, from initial idea to full-scale operation and the infrastructure to run it on
Hitachi Digital represents One Hitachi, integrating domain knowledge and digital capabilities, and harnessing the power of the entire portfolio of services, technologies, and partnerships, to accelerate synergy creation and make real-world impact for our customers and society as a whole, Imagine the sheer breadth of talent it takes to unleash a digital future
We dont expect you to ?fitevery requirement your life experience, character, perspective, and passion for achieving great things in the world are equally as important to us, Meet Our Team
We are the Global Cyber team, part of Global Information Security at Hitachi Digital
Our mission is to protect the company's and its customers' vital information systems and data while responding to attacks, intrusions, and other security incidents
As passionate advocates of information security, we are a team of out-of-the-box thinkers, innovators, and collaborative problem-solvers
We continuously seek new and better ways to enhance our practices and strive for nothing less than excellence in our cybersecurity operations
We are looking for highly motivated individuals with a positive attitude who want to be part of something exceptional, What Youll Be Doing
As a Red Teaming & Web Application Security Specialist, you will be responsible for conducting advanced offensive security assessments to identify vulnerabilities across applications, infrastructure, and processes
This role will blend adversary simulation (Red Team) exercises with deep web application penetration testing to proactively uncover and remediate security weaknesses before they can be exploited by malicious actors, Key Responsibilities
Red Teaming & Adversary Simulation
Plan, execute, and document red team engagements simulating realistic cyberattacks against the organizations systems, applications, and users, Emulate threat actorstactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK, Conduct physical security assessments, social engineering campaigns (phishing, vishing), and insider threat simulations as required, Collaborate with the Blue Team to validate detection and response capabilities, providing actionable improvement plans, Web Application Security
Perform manual and automated web application penetration testing using tools like Burp Suite, OWASP ZAP, and custom scripts, Identify, validate, and exploit vulnerabilities such as injection flaws, authentication bypass, XSS, CSRF, SSRF, and insecure deserialization, Work with development teams to remediate findings and ensure secure coding practices, Conduct source code reviews to detect and eliminate security flaws, Security Research & Tool Development
Develop and maintain custom tools, scripts, and exploits to enhance testing capabilities, Stay current with emerging attack vectors, zero-days, and security trends, Perform threat modeling and provide secure architecture recommendations, What Youll Bring
7 years of experience in Web security and red teaming
Plan, execute, and document red team engagements simulating realistic cyberattacks against the organizations systems, applications, and users, Emulate threat actorstactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK, Conduct physical security assessments, social engineering campaigns (phishing, vishing), and insider threat simulations as required, Collaborate with the Blue Team to validate detection and response capabilities, providing actionable improvement plans, Perform manual and automated web application penetration testing using tools like Burp Suite, OWASP ZAP, and custom scripts, Identify, validate, and exploit vulnerabilities such as injection flaws, authentication bypass, XSS, CSRF, SSRF, and insecure deserialization, Work with development teams to remediate findings and ensure secure coding practices, Conduct source code reviews to detect and eliminate security flaws, Develop and maintain custom tools, scripts, and exploits to enhance testing capabilities, Stay current with emerging attack vectors, zero-days, and security trends, Perform threat modeling and provide secure architecture recommendations, If you are passionate about cybersecurity and ready to work with a top-tier SOC team, we invite you to join us at Hitachi Digital, About Us
Were a global, 1000-strong, diverse team of professional experts, promoting and delivering Social Innovation through our One Hitachi initiative (OT x IT x Product) and working on projects that have a real-world impact
Were curious, passionate and empowered, blending our legacy of 110 years of innovation with our shaping our future
Here youre not just another employee; youre part of a tradition of excellence and a community working towards creating a digital future, Championing diversity, equity, and inclusion
Diversity, equity, and inclusion (DEI) are integral to our culture and identity
Diverse thinking, a commitment to allyship, and a culture of empowerment help us achieve powerful results
We want you to be you, with all the ideas, lived experience, and fresh perspective that brings
We support your uniqueness and encourage people from all backgrounds to apply and realize their full potential as part of our team, How We Look After You
We help take care of your today and tomorrow with industry-leading benefits, support, and services that look after your holistic health and wellbeing
Were also champions of life balance and offer flexible arrangements that work for you (role and location dependent)
Were always looking for new ways of working that bring out our best, which leads to unexpected ideas
So here, youll experience a sense of belonging, and discover autonomy, freedom, and ownership as you work alongside talented people you enjoy sharing knowledge with, Were proud to say were an equal opportunity employer and welcome all applicants for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, age, disability status or any other protected characteristic
Should you need reasonable accommodations during the recruitment process, please let us know so that we can do our best to set you up for success,
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Application Security EngineerEmployement Type: Full timeContact Details:
Company: Hitachi DigitalLocation(s): Noida, Gurugram+ View Contact
Keyskills: excel erp systems erp financial reporting variance analysis accounting project finance finance process improvements
Fraud Alert to job seekers!
₹ Not Disclosed
Similar positions
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in