Security Engineer II

2 weeks ago

Bengaluru, Karnataka, India Halodoc Full time

About This Role

Halodoc is looking for an individual who can adopt the mindset of an attacker to proactively identify security vulnerabilities and collaborate closely with cross-functional teams to promptly address them.

This role involves taking charge of the end-to-end secure development requirements, discovering vulnerabilities and security misconfigurations through Penetration Testing, Vulnerability Assessment, Threat Modeling, Red-teaming exercises, etc.

You are expected to provide the remediation strategy specific to the Halodoc product tech stack by carefully considering the tradeoffs between security and user experience.

Additionally, we are looking for someone passionate about exploring new technologies (i.e., LLM) and methodologies to constantly improve our security posture. We believe the successful candidate is a team player with excellent communication skills, creative problem-solving ability, and a strong passion for product security.

Security Engineer, Product Security

To apply for this position, you must have:

  • Minimum 6 years of experience building and securing software, with at least 4 years focusing on Web or Mobile application security.
  • Hands On Experience performing security design reviews, threat modelling, or security testing.
  • Ability to analyze security requirements and design secure cloud solutions based on AWS services.
  • Ability to utilize a variety of tools like Git, Jenkins, Artifactory, Gradle, Groovy, YML, and AWS security capabilities (WAF, SecurityHub, GuardDuty, Security Groups, IAM, etc).
  • Relevant knowledge of modern web and mobile app security landscape, real-world attacks and mitigations.
  • Enthusiasm for writing code, and helping others do the same.
  • Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.
  • Proactiveness and be self-driven to be successful working in a remote environment.

Security Engineer, Product Security

Key Job Responsibilities:

  • Conduct product/feature level Design Reviews, Code Reviews, Threat Modeling, Penetration Testing and Vulnerability Assessment.
  • Discover vulnerabilities through Web, Mobile and API Penetration testing.
  • Improve and oversee the configuration of Web Application Firewall (WAF) systems to safeguard the Halodoc applications against external threats and malicious attack patterns.
  • Automate security test cases and guide the security team in writing both SAST & DAST custom rules as well as Cloud security automation.
  • Implement new or improved technologies and tooling, such as SAST, DAST, SCA, etc., to strengthen Halodoc security posture and drive innovation while maximizing ROI.
  • Investigate user security issues, utilizing product knowledge and logs to understand potential incidents and proposing improvements to monitoring for quicker detection and containment of the similar issues.
  • Support Halodoc Bug Bounty program through triaging submissions, proposing remediations and determining the root cause and severity of the reported vulnerabilities.
  • Take an active role in driving internal security and privacy initiatives.
  • Interact directly with the security community regarding vulnerabilities and threats.
  • Analyze, assess, and respond to the various security threats.

Good to have Qualifications:

  • OSCP and or AWS Certified Security certification is a plus.
  • Bug bounty experience is a plus.
  • Solid experience in writing and reviewing code in at least one of the following programming languages: Java, JavaScript (Node JS), Go, Python.
  • Research on AI-specific security threats including prompt injection, backdoor, privacy extraction.

Preferred Qualifications

Contributions to the security community (public research, blogging, presentations, etc) B.S. or M.S. Computer Science or related field, or equivalent experience

  • Security Engineer II

    4 weeks ago

    Bengaluru, Karnataka, India Meesho Full time

    About the RoleAs our Security Engineer II, your primary focus will be on enhancing the security of Meeshos products and services, with particular attention to vulnerability assessment, patch management, purple teaming, incident detection and response in cloud environments. Leveraging your expertise in infrastructure security, you will conduct thorough...

  • Security Engineer II

    2 weeks ago

    Bengaluru, Karnataka, India Meesho Full time

    About the Role As our Security Engineer II, your primary focus will be on enhancing the security of Meeshos products and services, with particular attention to vulnerability assessment, patch management, purple teaming, incident detection and response in cloud environments. Leveraging your expertise in infrastructure security, you will conduct thorough...

  • Software Engineer II

    2 weeks ago

    Bengaluru, Karnataka, India Abnormal Security Full time

    Job DescriptionAbout The RoleAbnormal Security is building a comprehensive tool to understand and protect our customers&apos employees, and we need your help to build a new layer of protection that will give enterprises the same level of security for their cloud offerings as our industry-leading products do in the email security space.We&aposre looking to...

  • Security Analyst II

    7 days ago

    Bengaluru, Karnataka, India Cyderes Full time

    Job DescriptionCyderes (Cyber Defense and Response) is a pure-play, full life-cycle cybersecurity services provider with award-winning managed security services, identity and access management, and professional services designed to manage the cybersecurity risks of enterprise clients. We specialize in multi-technology, complex environments with the in speed...

  • Backend Engineer II

    19 hours ago

    Bengaluru, Karnataka, India Practo Technologies Private Limited Full time

    About UsAt Practo Technologies Private Limited, we are committed to making healthcare more accessible and efficient. We connect millions of patients with healthcare providers, simplifying the journey to better health.The RoleWe are seeking a talented Backend Engineer II to join our development team. As an SE-II, you will be responsible for developing and...

  • Information Security Platform Engineer II, ITC

    4 weeks ago

    Bengaluru, Karnataka, India NIKE Full time

    WHO WILL YOUWORK WITHWe are building andsupporting petabyte-class solutions that consume fast movingstreams from eCommerce, retail and partner channels to power thecritical decisions that drive our business. You will be a key partof Nike's Digital Transformation initiative to help deliverefficient data access, reliable data warehousing platforms,enhanced...

  • Frontend Engineering Lead

    3 days ago

    Bengaluru, Karnataka, India Safe Security Full time

    About the RoleWe are seeking a skilled Software Engineer - Frontend - SDE II to join our team. This role involves developing reusable components, contributing to design systems, and collaborating with cross-functional teams to deliver end-to-end features.

  • RSA - Application Security Engineer

    3 weeks ago

    Bengaluru, Karnataka, India RSA Security Full time

    RSA - Application Security Engineer (Location: Hybrid/ Remote India) RSA offers mission-driven security solutions that provide organizations with a unified approach to managing digital risk that hinges on integrated visibility, automated insights and coordinated actions. RSA solutions are designed to effectively detect and respond to advanced attacks;...

  • Information Security Platform Engineer II, ITC

    4 weeks ago

    Bengaluru, Karnataka, India NIKE Full time

    WHO WILL YOU WORK WITHWe are building and supporting petabyte-class solutions that consume fast moving streams from eCommerce, retail and partner channels to power the critical decisions that drive our business. You will be a key part of Nike's Digital Transformation initiative to help deliver efficient data access, reliable data warehousing platforms,...

  • Software Engineer Ii

    2 weeks ago

    Bengaluru, Karnataka, India Mimecast Full time

    Software Engineer 2 - FrontendEmail and Collaboration Security TeamAbout the jobMimecast is looking for a Software Engineer II Front End focused engineer to join our team in Bangalore This is a global team that will work on building UI for security products As a Software Engineer II you will be excited and passionate about building scalable solutions ...

  • Cyber Security Engineer

    7 days ago

    Bengaluru, Karnataka, India Metron Security Full time

    We are looking for passionate developers with 3-6 years of experience in software development to join Metron Security as Cyber Security Engineers. Our team works on leading security platforms, including Splunk, IBM's QRadar, ServiceNow, Crowdstrike, Cybereason, and other SIEM and SOAR platforms.Role OverviewA Cyber Security Engineer is at the core of the...

  • Security Engineer II

    3 weeks ago

    Bengaluru, Karnataka, India Upstox Full time

    Responsibilities: 1) Design, develop, and maintain tools and web applications to automate security tasks and enhance security measures across the organization.2) Develop and integrate security automation tools and processes into the CI/CD pipeline to ensure continuous security testing and compliance.3) Create threat models to identify risks and implement...

  • Software Engineer II

    3 weeks ago

    Bengaluru, Karnataka, India Chase Bank Full time

    Job DescriptionYou're ready to gain the skills and experience needed to grow within your role and advance your career - and we have the perfect software engineering opportunity for you.As a Software Engineer II at JPMorgan Chase within the Commercial & Investment Bank, you are part of an agile team that works to enhance, design, and deliver the software...

  • Database Engineer II

    3 weeks ago

    Bengaluru, Karnataka, India Meesho Full time

    Job DescriptionAbout The TeamWhen 5% of Indian households shop with us, its important to build resilient systems to manage millions of orders every day. Weve done this with zero downtime Sounds impossible Well, thats the kind of Engineering muscle that has helped Meesho become the e-commerce giant that it is today. We value speed over perfection and see...

  • Software Engineer II

    3 weeks ago

    Bengaluru, Karnataka, India Microsoft Full time

    Overview Microsoft Azure Storage is a highly distributed, massively scalable, and ubiquitously accessible cloud storage platform. The xDPU storage team is focused in bringing up the storage stack on DPU (Data Processing Unit) based nodes to provide unmatched performance at lowest cost. We are looking for a Software Engineer II who is interested in...

  • Engineer II

    4 days ago

    Bengaluru, Karnataka, India HARMAN India Full time

    Job DescriptionEngineer II,Job Summary:We are looking for a highly experienced Full Stack Developer with at least 10 years of industry experience. The ideal candidate should have a deep understanding of both frontend and backend technologies, experience in cloud infrastructure, DevOps practices, and proficiency with identity provider solutions (e.g., OAuth,...

  • QA Engineer II

    7 days ago

    Bengaluru, Karnataka, India CME Group Full time

    Job DescriptionThe QA Analyst II is an intermediate test engineer who is technically strong and has the business knowledge to execute, analyze, deliver and support any feature in the application. The incumbent must establish and maintain testing environments as well as analyze, verify, and troubleshoot test results against requirements. The QA Analyst II is...

  • Software Engineer II

    3 weeks ago

    Bengaluru, Karnataka, India Mimecast Full time

    Software Engineer II – Internal Platforms & FrameworksMimecast is at the forefront of the cybersecurity industry, delivering cutting-edge solutions to protect businesses and individuals from evolving threats. Our mission is to empower organizations with secure and scalable technology that stands resilient in the face of cyber challenges.We are seeking a...

  • Software Engineer II

    3 weeks ago

    Bengaluru, Karnataka, India RSA Security Full time

    Product Overview: Outseer Fraud Manager is an advanced, omnichannel fraud detection hub that provides risk-based, multi-factor authentication for organizations seeking to protect their consumers from fraud across digital channels. Powered by the AI/ML based Risk Engine, Outseer Fraud Manager is designed to measure the risk associated with a user's login...

  • Frontend Engineer II

    23 hours ago

    Bengaluru, Karnataka, India HyreSnap Full time

    Frontend Engineer II Design, implement, and maintain responsive and performant frontend features for our B2B SaaS and enterprise web applications using modern JavaScript frameworks and libraries. Build high-quality products and prototypes within tight timelines, demonstrating a strong ability to prioritize and execute efficiently. Explore and utilize...