Information Security Engineer

Job Title: Lead Engineer – Security Engineering

Experience: 9 Years to 12 Years.

Location:Remote (India)

About Majesco:-

At Majesco, we believe in connecting people and business to Insurance in ways that are Innovative, Relevant, Compelling and Personal. We bring together the brightest minds to build the future of Insurance; a world where Insurance makes life and business easier, more connected, and better protected. If you are passionate about the power and possibilities that cloud technologies have unleashed and are looking to deliver transformative and innovative solutions that transform the customer experience, come join us!

Job Overview:-

We are looking for a Lead Engineer – Security Engineering to design and implement security controls across applications, cloud environments, development platforms, and infrastructure. The role will focus on DevSecOps, Application Security, Security Automation, WAF, and Offensive

Security.

Key Responsibilities:-

• Design and implement security controls across cloud, infrastructure, applications, and APIs.
• Drive DevSecOps and security automation by integrating security controls into CI/CD pipelines.
• Build and maintain GitHub Actions and security automation workflows.
• Lead Application Security activities including Threat Modeling, Secure Code Review, SAST, DAST, SCA, API Security, and CI/CD security.
• Manage and optimize Web Application Firewall (WAF), including OWASP Top 10 protection, bot mitigation, rate limiting, and attack detection.
• Conduct penetration testing, application security assessments, and red-team exercises for web applications and APIs.
• Identify vulnerabilities, provide remediation guidance, and work with engineering teams to improve security posture.
• Partner with Cloud, Infrastructure, and Development teams and provide technical guidance on security engineering practices.

Mandatory Skills:-

• Strong experience in Security Engineering / Application Security.
• Hands-on experience with DevSecOps, CI/CD security, and security automation.
• Strong knowledge of SAST, DAST, SCA, API Security, Threat Modeling, and Secure Code Review.
• Hands-on experience with WAF and web application security.
• Experience in penetration testing / offensive security / red teaming.
• Experience with GitHub Actions or similar CI/CD automation tools.
• Good understanding of Cloud Security and application/infrastructure security.
• Strong communication and collaboration skills.

Kindly share your updated profile along with the details mentioned below at :[Confidential Information]

• Total Experience:-
• Current CTC:-
• Expected CTC:-
• Notice Period:-
• Current Location:-