Staff Security Engineer

4 days ago

Bareilly, Uttar Pradesh, India Ethos Full time

About the Role:

We're looking for a Staff Security Engineer with deep technical expertise in application security, penetration testing, and offensive security practices. You will lead efforts to proactively identify and exploit vulnerabilities across our products and infrastructure, working alongside engineering and security teams to design robust defences and build security into everything we deploy.

This is a hands-on technical role with significant influence over the security posture of the company, from code to cloud.

Duties and Responsibilities:

Application Security

  • Perform code reviews, threat modelling, and architecture assessments across internal and customer-facing applications.
  • Guide engineering teams on secure design patterns, libraries, and development practices.
  • Integrate and maintain security tooling (SAST, DAST, SCA) into CI/CD pipelines.
  • Collaborate with product and engineering teams to remediate identified vulnerabilities and design secure solutions.

Penetration Testing

  • Conduct manual and automated penetration tests against Ethos Web Application, APIs, infrastructure, and cloud environments.
  • Simulate attacker behaviors to assess technical weaknesses and business risks.
  • Create detailed, developer-friendly reports with risk ratings and actionable remediation guidance.
  • Re-test findings and validate security fixes in collaboration with product owners.

Offensive Security

  • Plan and execute red team operations, simulating advanced persistent threat (APT) scenarios.
  • Develop custom tools, scripts, and exploits to test detection and response capabilities.
  • Collaborate to improve detection, logging, and incident response based on attack insights.
  • Contribute to the development of offensive security playbooks and adversary emulation plans.

Other Responsibilities

  • Mentor junior team members and evangelize security best practices across the company.
  • Participate in investigations, threat hunting, and incident response activities; build playbooks for specific incident response scenarios
  • Communicate risks to engineering staff through training and technical demonstration of vulnerabilities and secure design patterns
  • Support security audits, compliance efforts, and executive briefings with technical depth.

Qualifications and Skills:

Required:

  • 8+ years of experience in security engineering, penetration testing, or offensive security.
  • Strong understanding of secure coding principles, web security vulnerabilities (e.g., OWASP Top 10), and remediation techniques.
  • Proficiency in threat modeling, design reviews and security testing of various types of applications, technologies and platforms
  • Proficient in scripting and development (e.g., Python, Bash, Go, JavaScript).
  • Skilled in using tools such as Burp Suite, Metasploit, Nmap, Cobalt Strike, or custom tooling.
  • Experience with AWS cloud platform and containerized environments (Docker, Kubernetes).
  • Strong written and verbal communication skills for technical and non-technical audiences.

Preferred:

  • Certifications like OSCP, OSWE, OSEP, GXPN, or equivalent.
  • Experience with threat modeling methodologies (e.g., STRIDE, PASTA).
  • Familiarity with MITRE ATT&CK, adversary emulation, and purple teaming.
  • Contributions to security research, open-source tools, or bug bounty platforms.

  • Security Engineer

    2 days ago

    Bareilly, Uttar Pradesh, India beBeeDatabase Full time ₹ 38,50,000 - ₹ 44,00,000

    **Job Opportunity:**We are seeking a mid-level engineer with 3-5 years of experience to support database security initiatives.**Key Responsibilities:Configure and implement database security solutions.Collaborate with customers to gather requirements and deploy tailored solutions.Perform overnight system changes and updates.Troubleshoot and resolve issues...

  • Influential Security Professional Wanted

    3 days ago

    Bareilly, Uttar Pradesh, India beBeeSecurity Full time ₹ 1,80,00,000 - ₹ 2,50,00,000

    Staff Security SpecialistJob Description:We are seeking a seasoned Staff Security Engineer with expertise in application security, penetration testing, and offensive security practices.This is a technical role with significant influence over the company's security posture, from code to cloud.Perform code reviews, threat modeling, and architecture assessments...

  • Network Security Process Engineer

    1 day ago

    Bareilly, Uttar Pradesh, India beBeeNetworkSecurity Full time ₹ 15,00,000 - ₹ 20,00,000

    Network Security Process SpecialistWe are seeking a highly skilled Network Security Process Specialist to join our team.A bachelor's degree in computer science or a related field is required. A master's degree is preferred.At least 2 years of experience in process engineering, IT service management, or a related operational improvement role is...

  • Security Specialist

    4 hours ago

    Bareilly, Uttar Pradesh, India beBeeCybersecurity Full time ₹ 15,00,000 - ₹ 21,00,000

    Job OverviewWe are seeking a skilled Security Engineer to join our team.

  • Advanced Network Security Specialist

    4 days ago

    Bareilly, Uttar Pradesh, India beBeeNetwork Full time ₹ 8,00,000 - ₹ 10,00,000

    Job DescriptionWe are seeking a skilled Network Security Engineer to join our team. As a Network Security Engineer, you will be responsible for designing, implementing, and maintaining secure network infrastructures. This role involves monitoring network traffic for unusual activity, conducting security assessments, and collaborating with other IT...

  • Advanced Security Solutions Specialist

    6 hours ago

    Bareilly, Uttar Pradesh, India beBeeCybersecurity Full time ₹ 1,50,00,000 - ₹ 2,50,00,000

    Job SummarySecurity Solutions DeveloperOur organization is seeking a skilled security solutions developer to safeguard our systems, networks, and data against internal and external threats.The successful candidate will be responsible for designing and implementing security solutions, monitoring for vulnerabilities, and responding to incidents to ensure the...

  • Chief Security Strategist

    2 days ago

    Bareilly, Uttar Pradesh, India beBeeSecurity Full time ₹ 70,00,000 - ₹ 80,00,000

    Job OpportunityTo redefine the future of banking, we seek a visionary to lead our security initiatives.Key Responsibilities: Design and implement robust security measures across codebases, cloud infrastructure, and development lifecycle.Collaborate with engineering, product, and compliance teams to embed security into every stage of our build, deploy, and...

  • Client Security Expert

    1 day ago

    Bareilly, Uttar Pradesh, India beBeeAudit Full time ₹ 1,50,00,000 - ₹ 2,00,00,000

    We are seeking an experienced Client Questionnaires and Audit Manager to join our Information Security team. This role is critical in managing client security questionnaires, coordinating audits, and ensuring compliance with industry standards and regulations.The successful candidate will be a self-starter with strong security knowledge and excellent...

  • Senior Cyber Security Awareness Specialist

    7 hours ago

    Bareilly, Uttar Pradesh, India beBeeCybersecurity Full time ₹ 1,20,00,000 - ₹ 1,52,00,000

    Job Title:Cyber Security Awareness and Governance Expert">This is a pivotal role in strengthening our organisation’s cybersecurity posture.Main Responsibilities:Cybersecurity Strategy and Awareness:Create and implement comprehensive cybersecurity awareness and behaviour change programs tailored to various internal audiences, including executives,...

  • Enterprise Network Security Specialist

    2 days ago

    Bareilly, Uttar Pradesh, India beBeeNetwork Full time ₹ 15,00,000 - ₹ 20,00,000

    Job DescriptionWe are seeking a highly skilled and experienced engineer to join our team.The ideal candidate will administer and support Cisco Unified Communications Manager (CUCM), Webex Calling, and Webex Contact Center.They will also manage voice recording platforms, oversee certificate lifecycle management, and monitor performance using LogicMonitor,...