Role: Senior Cybersecurity Engineer
Experience Level: 3-10 years
Work location: Mumbai, Bangalore, Trivandrum
Roles & Responsibilities:
- Develop a complete understanding of a companys technology and information systems.
- Design, build, implement and support enterprise-class security systems.
- Identify and communicate current and emerging security threats
- Plan, research and design robust security architectures for any IT project.
- Perform or supervise vulnerability testing, risk analyses and security assessments.
- Create solutions that balance business requirements with information and cybersecurityrequirements.
- Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.
- Set up and support code security and infrastructure security activities of DevSecOps Pipeline.
- Must have experience in cloud concepts and perform assessment and implementation of new
technologies within the cloud.
- Use current programming language and technologies to write code, complete programming and perform testing and debugging of applications.
- Provide supervision and guidance to development and security teams.
- Define, implement and maintain corporate security policies and procedures.
- Respond immediately to security-related incidents and provide thorough remedial solutions and analysis.
Skills expectation:
Must Have
- Experience in automating security tools and processes ensuring innovation and advancement strategies that keep pace in the areas of access control, security-in-depth, secure transaction processing, secure coding practices.
- Experience in working in a high paced DevSecOps or SecOps environment with hands-on experience in Docker, Kubernetes and Cybersecurity tools like IDS, SIEM, SAST/DAST Scanners, EDR
- Experience in conducting and facilitating security reviews, threat modelling including deep design reviews throughout the development lifecycle to identify all the threats the systems are exposed to and recommended mitigations controls to address those threats.
- Hands-on knowledge in Cloud Security and AWS / GCP / Azure (good hands-on experience in at least one of them preferably GCP)
- Experience in performing penetration testing activities on Internal and large scale cloud infrastructure
- Hands-on experience in performing threat modelling and web application security
assessments
- Experience in evaluating and implementing industry leading third party security tools and software
- Hands-on experience in performing vulnerability assessment and management via
automation
- Effective communication skills with all the stakeholders involved.
- Skills to communicate clearly about complex subjects and technical plans with technical and non-technical audiences.
- Ability to identify risks associated with business processes, operations, technology projects and information security programs
Good to have
- Cloud native - Security and DevOps certifications
- OSCP Certification
