Lead Security Engineer

2 weeks ago


bangalore, India Flipkart Full time

About the team:

The Security Standards team is a part of the central Information security function which is primarily responsible for security standards, secure configuration reviews, architecture reviews, validating efficacy and efficiency of the existing security controls, threat modeling, assessment of the various security controls / technologies based on the gaps identified, security metrics, analytics, automation etc. This team owns the IT Security, Security controls and reviews them on a regular basis to ensure IT/Security controls are working as designed, and all features/capabilities of IT and Security products are being used to the maximum.

The InfoSec Security Standards team is primarily responsible for defining new and reviewing existing hardening standards, and carrying out secure configuration review assessments for Flipkart and Group. This function is also responsible for reviewing and approving technical security exceptions against the defined security standards.

About the role:

Flipkart is seeking a skilled, technocrat, motivated, strong security mindset and collaborative Lead, Security Engineer in the Security Standards team. You will serve as an expert, lead and be a mentor to the Security Standards team members. You will be a strong communicator and influencer, demonstrating curiosity to learn and understand the business.

What you’ll do:

Specializes in Security Standards Development, meticulously crafting security standards and protocols to fortify digital infrastructures. Conducts comprehensive Security Standards Assessments, scrutinizing systems for gaps and vulnerabilities Develop standards in accordance with industry recognised standards like CIS (Center for Internet Security), standards implementation and interpretation across FK Group. Security review of the architecture for the new projects and existing infrastructure setup. Expert in Security Configuration Reviews, ensuring optimal secure configurations and settings to mitigate risks. Ensure efficacy of security controls deployed. Work with the technical operations team to understand security controls / tech deployed and come up with recommendations to address gaps and also take full advantage of the deployed technologies. Conduct threat modeling based on well known standards / frameworks such as STRIDE, PASTA etc. Identifying and defining the requirements of the overall security of the information processing systems. Identify security gaps, exposures and develop mitigation plans Build and execute on organizations roadmaps Automation & Scripting as required. Defining and maintaining security procedures, standards,guidelines and procedures as required. Executes proactive measures to safeguard against emerging threats and collaborates cross-functionally to maintain cutting-edge security protocols.

What you’ll need:

Bachelor’s degree(B.E/B.Tech or M.S/M.Tech) in Information Technology or other related fields. At least 8-11 years of working experience in domains related to Information security and with a very strong security mindset. Implementation experience in Security technologies (at least 2+ years) such as Next Gen Firewall / IDS/ IPS / NAC / Email Security/CASB / EDR / WAF / AV / DLP / ATP / PIM / PAM / DAM / SIEM etc. In-depth understanding of networking concepts, protocols and in-depth knowledge of infrastructure, identity and endpoint security technology such as AD, Azure AD, Next Gen Firewall, IDS, IPD, AV, EDR, CASB, WAF, NAC, Wi-fi security, DLP, ATP, SIEM, Proxy etc. Proficiency in CIS (Center for Internet Security) standards implementation and interpretation. Very good understanding of Operating systems (Windows, MAC, Linux) & VDI etc. Knowledge and understanding of security standards, security configuration reviews, secure architecture and cloud security. Good understanding of security frameworks, standards such as ISO 27001, NIST, CIS etc. Experience in security architecture reviews and driving cross-functional programs. Strong skills in security principles such as least privilege access, defense in depth, preventative vs detective controls, network security, cloud security, application security, endpoint security, data protection, and incident response. Solid understanding of operational and organizational structures Possess of information security certifications such as CEH / ISO 27001 / TOGAF etc. Excellent problem solving, interpersonal,communication and presentation skills. Able to work independently and efficiently, as well as with others, to meet deadlines in a fast-paced environment.

  • bangalore, India RSA Security Full time

    RSA - Application Security Engineer Location: Remote India RSA offers mission-driven security solutions that provide organizations with a unified approach to managing digital risk that hinges on integrated visibility, automated insights and coordinated actions. RSA solutions are designed to effectively detect and respond to advanced attacks;...


  • bangalore, India RSA Security Full time

    RSA - Application Security Engineer Location: Remote India RSA offers mission-driven security solutions that provide organizations with a unified approach to managing digital risk that hinges on integrated visibility, automated insights and coordinated actions. RSA solutions are designed to effectively detect and respond to advanced attacks;...


  • bangalore, India RSA Security Full time

    Responsibilities• Work on any number of security and identity related areas and products• Build systems for detecting anomalous activities within the product• Develops and administers software engineering procedures and training for vulnerability scans and static code analysis• Analyse vulnerability report of various SCA and SAST scan tools like,...


  • bangalore, India Bosch Full time

    Job Description Role : Lead IT Security Engineer  You will lead the planning and implementation of Security Engineering Process across projects/programs. In the process, you will have to build seamless security and define how developers view security, eliminate friction and improve Security natively.  You will work closely with other Security...


  • bangalore, India Bosch Full time

    Job Description Role : Lead IT Security Engineer  You will lead the planning and implementation of Security Engineering Process across projects/programs. In the process, you will have to build seamless security and define how developers view security, eliminate friction and improve Security natively.  You will work closely with other Security...


  • bangalore, India Shell Recharge Solutions Full time

    Shell Recharge Solutions is seeking a Lead Security Engineer Shell Recharge Solutions is looking for a Lead Security Engineer to join our team. The ideal candidate will be member of the information security team that works closely with other members of the team, the business, and other IT staff to develop and manage security for one or more IT functional...


  • bangalore, India Guidewire Software Full time

    IT Infra Lead Security EngineerIndia - Bangalore Business Technology /Full-Time /On-SiteSecurity Engineer will implement security strategy and operations within an organization. They also need to know how to assess security risks, test systems and networks, and investigate and respond to security events. Identity and access management, data protection, and...


  • bangalore, India Guidewire Software Full time

    IT Infra Lead Security Engineer India - Bangalore Business Technology /Full-Time /On-Site Security Engineer will implement security strategy and operations within an organization. They also need to know how to assess security risks, test systems and networks, and investigate and respond to security events. Identity and access management, data protection,...


  • Bangalore Urban, India Shell Recharge Solutions Full time

    Shell Recharge Solutions is seeking a Lead Security EngineerShell Recharge Solutions is looking for a Lead Security Engineer to join our team. The ideal candidate will be member of the information security team that works closely with other members of the team, the business, and other IT staff to develop and manage security for one or more IT functional...


  • bangalore, India Xencia Technology Solutions Full time

    Years of Expereince: 7+ yrs. Location: Bangalore (Work from Office) Detailed Job Description that should cover the Job Purpose, Responsibilities, Required & Preferred Qualifications, Mandatory & Good-to-have Skills. We are looking for an experienced Lead Engineer- Security to join our team. The ideal candidate will have a strong background in both...


  • bangalore, India Alexander Ash Consulting Full time

    Alexander Ash is currently hiring a Security Testing Lead for one of its financial services clients in India (Remote). The candidate will be responsible for Owning, leading and managing the IT Security testing process, including vulnerability assessments, penetration testing, code reviews, security audits, and much more. The Candidate must be hands-on with...


  • bangalore, India Resillion Full time

    Job DescriptionTitle: Lead SIEM Engineer Experience Range: 9-14 Years  Location: Bangalore About You: The successful candidate will be a passionate information security professional with the ability to communicate to different business and IT leaders. The candidate will demonstrate drive, intelligence, maturity, and energy and will have a proven...


  • bangalore, India JPMorgan Chase & Co. Full time

    Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies. As a Lead Security Engineer at JPMorgan Chase within the Cybersecurity and Technology Controls organization,...


  • bangalore, India Hinge Health Full time

    Hinge Health is moving people beyond pain by transforming the way it is treated and prevented. Connecting people digitally and in-person with expert clinical care, we combine advanced technology, AI and a care team of experts to guide people through personalized care directly from their phone. Our approach is proven to reduce pain by 68%, prevent 42% of new...


  • bangalore, India Hinge Health Full time

    Hinge Health is moving people beyond pain by transforming the way it is treated and prevented. Connecting people digitally and in-person with expert clinical care, we combine advanced technology, AI and a care team of experts to guide people through personalized care directly from their phone. Our approach is proven to reduce pain by 68%, prevent 42% of new...


  • bangalore, India Optiv Security Inc. Full time

    We're looking for knowledge-seeking candidates who will be eager to dive into new things in a fast-paced and ever-changing environment. This role is fitting for those looking to trailblaze their career in network security.Operating as the first impression for Optiv clients in many cases, engineers deliver both third-party Authorized Support and Technology...


  • bangalore, India Optiv Security Inc. Full time

    We're looking for knowledge-seeking candidates who will be eager to dive into new things in a fast-paced and ever-changing environment. This role is fitting for those looking to trailblaze their career in network security.Operating as the first impression for Optiv clients in many cases, engineers deliver both third-party Authorized Support and Technology...


  • bangalore, India Anicalls (Pty) Ltd Full time

    Candidate should be able to:Create and manage bug bounty programs.Evangelize software security best practices.Perform threat modeling, architecture design reviews, and detection capabilitiesDevelop and implement security tooling.Partner with software engineering and product teams to ensure security throughout the SDLC.Candidate should have:Strong...


  • bangalore, India Anicalls (Pty) Ltd Full time

    Candidate should be able to:Create and manage bug bounty programs.Evangelize software security best practices.Perform threat modeling, architecture design reviews, and detection capabilitiesDevelop and implement security tooling.Partner with software engineering and product teams to ensure security throughout the SDLC.Candidate should have:Strong...


  • Bangalore, India CGI Full time

    Role : Lead Microsoft Security EngineerLocation : Bangalore Only Notice period : Immediate to 30 Days Position Description :- Expert knowledge of Information Protection- Expert knowledge of Microsoft security suite of products (Sensitivity labelling and Data Loss Prevention especially)- Expert knowledge and experience of configuration, design and execution...