EdgeVerve - Product Security Engineer - Penetration Testing

4 weeks ago

Bengaluru, Karnataka, India Edgeverve Full time

Job Objective :

As a Product Security Engineer, you'll play a vital role in ensuring the security of our products, particularly those catering to the financial domain. You'll be responsible for overseeing vulnerability assessments, penetration testing, and contributing to a secure development Responsibilities :

- Conduct vulnerability assessments and penetration testing on a wide range of critical web applications.

- Leverage SAST and DAST tools to identify and analyze security issues, recommending effective remediation strategies.

- Design and implement secure software systems, ensuring that security is an integral part of the software design process.

- Collaborate with the development team to apply secure design principles and patterns.

- Identify potential security vulnerabilities during the design phase and propose secure solutions.

- Perform security assessments of web services and APIs, including identity and token authentication and authorization mechanisms.

- Deep dive into existing implementations to thoroughly assess security posture.

- Collaborate with the development team to implement secure architecture and design principles.

- Stay up to date on emerging threats like DDoS, ransomware, and supply chain attacks, and implement :

- 4- 6 years of experience in product and application security with production/cloud experience

- Good knowledge in Kubernetes, Container Image, Container Image registry, CI/CD - security aspects

- Good to have AWS Cloud EKS, RDS, S3, IAM, CloudWatch Services

- Thorough understanding of HTTPS, TLS 1.2, TLS 1.3, and public/symmetric key cryptography.

- Proficiency in security tools like Burp Suite, Nmap, ZAP, Black duck Hub, NVD, and CVE/CWEs.

- Knowledge of secure implementations on cloud platforms.

- Experience with one or more of the following :

- Front-end technologies such as Angular, React, or JavaScript.

- Back-end technologies such as Java, Node.js, TypeScript, Spring, or C

Bonus Points :

- Experience in the financial domain.

- Experience with OWASP Top 10, SANS Top 25, BDH, and Palo Alto advisories.

(ref:hirist.tech)

  • Test Engineer

    4 weeks ago

    Bengaluru, Karnataka, India EdgeVerve Full time

    Product Test Engineer – Manual Testing (with Automation, AI & Cloud Knowledge) Hands on experience in Selenium, Cucumber, AI required Location: Bangalore Experience Level: 2 years Job Summary: We are seeking a detail-oriented and highly skilled Product Testing Engineer with strong experience in manual testing across web and client server...

  • Test Engineer

    2 weeks ago

    Bengaluru, Karnataka, India EdgeVerve Full time

    Product Test Engineer – Manual Testing (with Automation, AI & Cloud Knowledge)Hands on experience in Selenium, Cucumber, AI requiredLocation: BangaloreExperience Level: 2 yearsJob Summary:We are seeking a detail-oriented and highly skilled Product Testing Engineer with strong experience in manual testing across web and client server application, and a...

  • Only 24h Left: Data Architect

    2 weeks ago

    Bengaluru, Karnataka, India EdgeVerve Full time

    Location : BangaloreExperience : 10-15Company : EdgeVerve Systems LimitedAbout EdgeVerve :EdgeVerve, a subsidiary of Infosys, is a global leader in building innovative products that enable digital transformation for enterprises. Our AI-powered platforms are redefining the future of work, enabling clients to unlock operational efficiency, drive intelligent...

  • Data Architect

    1 day ago

    Bengaluru, Karnataka, India EdgeVerve Full time

    Location : Bangalore Experience : Company : EdgeVerve Systems Limited About EdgeVerve : EdgeVerve, a subsidiary of Infosys, is a global leader in building innovative products that enable digital transformation for enterprises. Our AI-powered platforms are redefining the future of work, enabling clients to unlock operational efficiency, drive...

  • Data Architect

    3 days ago

    Bengaluru, Karnataka, India EdgeVerve Full time

    Location : Bangalore Experience : 10-15 Company : EdgeVerve Systems Limited About EdgeVerve : EdgeVerve, a subsidiary of Infosys, is a global leader in building innovative products that enable digital transformation for enterprises. Our AI-powered platforms are redefining the future of work, enabling clients to unlock operational efficiency, drive...

  • Product security

    3 days ago

    Bengaluru, Karnataka, India Infosys Finacle Full time

    Responsibilities:Knowledge of various security assessments, vulnerability assessments and penetration tests on a wide variety of high critical web applications.Understanding of SAST, DAST, ability to analyze security issues and suggest remediations.Perform web services and API security assessments, Analysis and assessments of Identity and Token...

  • Product security

    6 days ago

    Bengaluru, Karnataka, India Infosys Finacle Full time

    Responsibilities: Knowledge of various security assessments, vulnerability assessments and penetration tests on a wide variety of high critical web applications. Understanding of SAST, DAST, ability to analyze security issues and suggest remediations. Perform web services and API security assessments, Analysis and assessments of Identity and Token...

  • Product security

    3 days ago

    Bengaluru, Karnataka, India Infosys Finacle Full time

    Responsibilities: Knowledge of various security assessments, vulnerability assessments and penetration tests on a wide variety of high critical web applications. Understanding of SAST, DAST, ability to analyze security issues and suggest remediations. Perform web services and API security assessments, Analysis and assessments of Identity and Token...

  • Product security

    3 days ago

    Bengaluru, Karnataka, India Infosys Finacle Full time

    Responsibilities:Knowledge of various security assessments, vulnerability assessments and penetration tests on a wide variety of high critical web applications.Understanding of SAST, DAST, ability to analyze security issues and suggest remediations.Perform web services and API security assessments, Analysis and assessments of Identity and Token...

  • Product security

    1 day ago

    Bengaluru, Karnataka, India Infosys Finacle Full time

    Responsibilities: Knowledge of various security assessments, vulnerability assessments and penetration tests on a wide variety of high critical web applications. Understanding of SAST, DAST, ability to analyze security issues and suggest remediations. Perform web services and API security assessments, Analysis and assessments of Identity and Token...