Senior Software Engineer
- i2V
- 6 - 11 years
- Bengaluru
- 2 months ago
- Email to a friend
- Report this job
Job Description
- Integrate security best practices into every stage of the software development lifecycle.
- Apply OWASP secure coding standards and ensure compliance with security regulations.
- Design and implement security measures for applications across cloud and on-prem environments.
- Conduct and triage vulnerability assessments, penetration testing, and remediate security risks.
- Identify and remediate OWASP Top 10 vulnerabilities, including Broken Access Control, Cryptographic Failures, Injection, Insecure Design, Security Misconfiguration, Vulnerable and Outdated Components, ID and Authentication Failures, Software/Data Integrity Failures, Logging and Monitoring Failures, and SSRF.
- Use SCA, SAST, and DAST tools and techniques to assess and secure applications, and calculate CVSS scores for vulnerabilities.
- Lead security engineering teams and participate in critical security fixes and stakeholder meetings (Product Security, PM, Customer Support).
- Drive container security best practices and secure-by-design solutions using AKS, Docker, and cloud platforms like Azure or AWS.
- Model and assess threats using security threat modeling and employ security debugging tools and techniques for thorough security analysis.
- Ensure authentication (AuthN), authorization (AuthZ), and exposure to identity management services (Microsoft AD, OIDC, OKTA).
- Deliver quality code with automated tests, CI/CD pipelines, and agile development methods.
- Stay up-to-date with the latest security trends, tools, and technologies; mentor peers on best practices.
Job Requirements
- 6+ years of experience in full stack development (ASP.NET Core, MVC, C#, MS SQL Server, MongoDB, Redis).
- Proven expertise in software security, SCA, SAST, DAST, vulnerability detection, and OWASP remediation.
- Practical skills in calculating CVSS scores.
- Hands-on experience with Top 10 OWASP vulnerability identification and resolution.
- Deep understanding of threat modeling, penetration testing, secure coding, and security debugging.
- Container security expertise and secure architecture experience.
- Proficient in object-oriented JavaScript, Node.js, TypeScript, CSS/HTML; building SPAs with responsive design.
- Well-versed in authentication/authorization and with identity management services (Microsoft AD, OIDC, OKTA).
- 2+ years working with cloud computing (Azure or AWS) and DevOps pipelines.
- Strong problem-solving skills, attention to detail, and independent work attitude.
- Excellent communication and negotiation skills; able to lead and collaborate with teams and stakeholders.
- Commitment to triaging issues, adhering to SLAs based on severity, and delivering security solutions in collaboration with product and customer teams.
- Bachelor's degree in Computer Science, Software Engineering, or a related discipline.
Job Classification
Industry: Software ProductFunctional Area / Department: Engineering - Software & QARole Category: Quality Assurance and TestingRole: Blockchain Quality Assurance EngineerEmployement Type: Full timeContact Details:
Company: IvantiLocation(s): Bengaluru+ View Contact
Keyskills: dast nodejavascript scr threat modeling penetration testingsecure coding sast typescript
Fraud Alert to job seekers!
₹ Not Disclosed
Similar positions
i2V
i2v System Pvt. Ltd is a technology solutions provider specializing in video surveillance, security systems, and intelligent software platforms. The company develops advanced products such as video management software, analytics, and integrated security solutions tailored for enterprises and governm...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in