Cyber Security Engineer II

Found in: Whatjobs IN C2 - 1 week ago

india Halodoc Full time

About This Role

Halodoc is looking for an individual who can adopt the mindset of an attacker to proactively identify security vulnerabilities and collaborate closely with cross-functional teams to promptly address them. This role involves taking charge of the end-to-end secure development requirements, discovering vulnerabilities and security misconfigurations through Penetration Testing, Vulnerability Assessment, Threat Modeling, Red-teaming exercises, etc. You are expected to provide the remediation strategy specific to the Halodoc product tech stack by carefully considering the tradeoffs between security and user experience. Additionally, we are looking for someone passionate about exploring new technologies (i.e., LLM) and methodologies to constantly improve our security posture. We believe the successful candidate is a team player with excellent communication skills, creative problem-solving ability, and a strong passion for product security.


Security Engineer, Product Security

To apply for this position, you must have:

  • Minimum 6 years of experience building and securing software, with at least 4 years focusing on Web or Mobile application security.
  • Hands On Experience performing security design reviews, threat modelling, or security testing.
  • Ability to analyze security requirements and design secure cloud solutions based on AWS services.
  • Ability to utilize a variety of tools like Git, Jenkins, Artifactory, Gradle, Groovy, YML, and AWS security capabilities (WAF, SecurityHub, GuardDuty, Security Groups, IAM, etc).
  • Relevant knowledge of modern web and mobile app security landscape, real-world attacks and mitigations.
  • Enthusiasm for writing code, and helping others do the same.
  • Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.
  • Proactiveness and be self-driven to be successful working in a remote environment.


Security Engineer, Product Security Key Job Responsibilities:

  • Conduct product/feature level Design Reviews, Code Reviews, Threat Modeling, Penetration Testing and Vulnerability Assessment.
  • Discover vulnerabilities through Web, Mobile and API Penetration testing.
  • Improve and oversee the configuration of Web Application Firewall (WAF) systems to safeguard the Halodoc applications against external threats and malicious attack patterns.
  • Automate security test cases and guide the security team in writing both SAST & DAST custom rules as well as Cloud security automation.
  • Implement new or improved technologies and tooling, such as SAST, DAST, SCA, etc., to strengthen Halodoc security posture and drive innovation while maximizing ROI.
  • Investigate user security issues, utilizing product knowledge and logs to understand potential incidents and proposing improvements to monitoring for quicker detection and containment of the similar issues.
  • Support Halodoc Bug Bounty program through triaging submissions, proposing remediations and determining the root cause and severity of the reported vulnerabilities.
  • Take an active role in driving internal security and privacy initiatives.
  • Interact directly with the security community regarding vulnerabilities and threats.
  • Analyze, assess, and respond to the various security threats.

Good to have Qualifications:

  • OSCP and or AWS Certified Security certification is a plus.
  • Bug bounty experience is a plus.
  • Solid experience in writing and reviewing code in at least one of the following programming languages: Java, JavaScript (Node JS), Go, Python.
  • Research on AI-specific security threats including prompt injection, backdoor, privacy extraction.

Preferred Qualifications

Contributions to the security community (public research, blogging, presentations, etc) B.S. or M.S. Computer Science or related field, or equivalent experience

  • Cyber security Engineer

    Found in: Whatjobs IN C2 - 1 week ago

    india Fadac Resources Full time

    Job Description Our client is a leading enterprise technology Integrator specialized in the deployment of dynamic and highly scalable ICT Infrastructure Solutions. Due to expansion, they are currently in need of a Cyber Security Engineer. LOCATION : LagosRESPONSIBILITIES: Planning, implementing, managing, monitoring, and upgrading security measures for the...

  • Cyber Security Engineer

    Found in: Whatjobs IN C2 - 3 weeks ago

    india Teradyne Full time

    Our Purpose TERADYNE, where experience meets innovation and driving excellence in every connection. We are fueled by creativity and diversity of thought and in our workforce. Our employees are challenged to innovate and learn something new every day. We cultivate a culture of inclusion for all employees that respects their individual strengths, views,...

  • Cyber Security Engineer

    Found in: Whatjobs IN C2 - 3 days ago

    india DriveSec Technologies Full time

    Company Description DriveSec Technologies is a leading organization that empowers and enables companies to drive security and enhance workplace, infrastructure, and technological security processes. Our mission is to bridge the gap between technical teams and business teams, fostering a shift-left culture and mindset for secure growth. We prioritize a...

  • Cyber Security Engin

    7 days ago

    India Whiteforce Full time

    **Employment Information**: - Industry - ** Cyber Security** - Job level - *** - Salary - ** -** - Experience - ** -** - Pay-Type- Close-date- JOB-ID - **JB-19831** - Location - **India** **Job Descriptions**: Careem is looking for an experienced SOC L2 analyst as we are ramping up the Cyber Fusion Center. The person working in the SOC L2 team operates the...

  • Cyber Security Analyst-IT

    Found in: Whatjobs IN C2 - 1 week ago

    india Careers International Full time

    Job Description Position Overview: The Cyber Security Analyst plays a critical role in safeguarding the digital assets and information of a Fast-Moving Consumer Goods (FMCG) company from cyber threats and attacks. This position involves monitoring, analyzing, and responding to security incidents, implementing security measures and controls, and providing...

  • Cyber Security Specialist

    Found in: Whatjobs IN C2 - 3 weeks ago

    india Next-Link Full time

    Job Description Responsibilities: Utilize a minimum of 4-5 years of professional experience with IGA/SailPoint tooling.Focus primarily on onboarding applications onto the cyber security platform.Demonstrate proficient scripting/programming skills, including Java, Beanshell, and JavaScript.Display strong integration experience with SailPoint, particularly...

  • Cyber Security Instructor

    Found in: Whatjobs IN C2 - 3 days ago

    india Mrwebsecure Infosolutions Private Limited Full time

    *Job Description: Cyber Security Trainer*Position: Cyber Security TrainerLocation: Mumbai (Andheri West )Company Overview:Mrwebsecure Infosolutions Private Limited is a leading provider of cybersecurity solutions dedicated to educating individuals and organizations about the importance of cybersecurity practices. We are committed to fostering a secure...

  • Cyber Security Engineer

    Found in: Whatjobs IN C2 - 2 weeks ago

    india Tata Technologies Full time

    Experience - 3 TO 6 Years Location -Pune Qualification - B.E / B.Tech Roles and Responsibilities Design and implementation of Automotive cyber security Design security solution for Connected Car infrastructure(On-board and Off-board) Planning, creating and ensuring that the data and other security policies are implemented. To ensure that every security...

  • Cyber Security Instructor

    Found in: Appcast Linkedin IN C2 - 2 weeks ago

    India Hackersdaddy Full time

    Company DescriptionHackersdaddy is a cybersecurity company dedicated to assisting businesses in safeguarding their operations. Our team of professionals provides comprehensive services and training to ensure the security of your company. We prioritize cybersecurity and are committed to helping businesses ward off potential threats.Role DescriptionThis is a...

  • Cyber Security Instructor

    Found in: Whatjobs IN C2 - 2 weeks ago

    India Hackersdaddy Full time

    Company Description Hackersdaddy is a cybersecurity company dedicated to assisting businesses in safeguarding their operations. Our team of professionals provides comprehensive services and training to ensure the security of your company. We prioritize cybersecurity and are committed to helping businesses ward off potential threats. Role Description This...

  • Business Analyst with Cyber Security

    Found in: Whatjobs IN C2 - 6 days ago

    india NAM Info Inc Full time

    Proven experience as a Business Analyst, with a focus on cyber security or identity and Access management. In-depth knowledge of cyber security principles, practices, and technologies. Analyze existing business processes and workflows to identify potential security vulnerabilities. Collaborate with stakeholders to understand business requirements and...

  • Business Analyst with Cyber Security

    Found in: Appcast Linkedin IN C2 - 7 days ago

    India NAM Info Inc Full time

    Proven experience as a Business Analyst, with a focus on cyber security or identity and Access management.In-depth knowledge of cyber security principles, practices, and technologies.Analyze existing business processes and workflows to identify potential security vulnerabilities.Collaborate with stakeholders to understand business requirements and translate...

  • Cyber Security Specialist

    Found in: Whatjobs IN C2 - 3 weeks ago

    india PowerData Group Consulting Full time

    Job Description We are seeking Cyber Security Specialists  Location: Anywhere in Australia (remote possible)  Requirement: Must have one of these certificates at least. Please reply attaching a certificate proof and ideally an Australian Police Check.  Investigative services e.g. EnCE, ACE, CCE, GCFA, CFCE, PCI (ASIS Professional Certified...

  • Cyber Security Threat Hunter, Analyst

    Found in: Whatjobs IN C2 - 1 week ago

    india Agensi Pekerjaan BTC Sdn Bhd Full time

    Job Description Open Position: Cyber Security Threat Hunter, Analyst (MNC Company) A well-known MNC company is currently hiring Cyber Security Threat Hunter, Analyst to join them in their Kuala Lumpur office.Key responsibilities include: • Must possess at least diploma or degree in IT or any related area.• Identifying and prioritizing emerging threats...

  • Cyber Security Delivery Lead

    Found in: Whatjobs IN C2 - 2 weeks ago

    india Tech Mahindra Full time

    Position: - Delivery Lead Grade- 16-20yrs of experience Location-Bangalore/ Pune/ Hyd/ Noida/ Mumbai Objective Drive Security Delivery, Customer Satisfaction, Growth and Revenue Assurance Design and delivery aspects of technology risk and cyber security Provides supervision for risk and control advisory services to help protect customers, assets,...

  • Cyber Security Analyst/Engineer

    Found in: Whatjobs IN C2 - 3 weeks ago

    Anywhere in India,Multiple Locations HNM Solutions Full time

    Role : Cyber Security Analyst/EngineerLocation : @Remote (PAN India)Total Experience : 5+ : We are looking for a Cyber Security Analyst to be a part of the our Cyber-Security team An ideal candidate will demonstrate an aptitude for learning new technologies, evidenced by the ability to expand upon core knowledge She/he should be highly analytical...

  • Cyber Security L3

    Found in: Whatjobs IN C2 - 1 week ago

    india Yotta Infrastructure Solutions Full time

    We are Hiring Cyber Security L3 (IBM QRadar) YOE: 8 + Years Location: Panvel or Airoli (Navi Mumbai) Job Responsibilities Experience in Threat & malware analysis. Active analysis on Security Vulnerabilities, Advisories, Incidents, and Attack techniques. Tuning the QRadar rules to remediate false positive security alerts. Creating QRadar rules to fulfill...

  • Cyber Security Intern

    3 days ago

    India Futurism Full time

    ID: 605 | Fresher | India | careers- We are searching for a Cyber Security Intern. who will be responsible for monitoring, reporting, and escalating events to our SOC Analysts. The primary function of this position is to monitor the analytics tools and perform alert management and initial incident qualification. This role reports to the SOC Team...

  • Cyber Security

    Found in: Whatjobs IN C2 - 1 week ago

    india STAFIDE Full time

    Job Description About us: Stafide is the premier destination for tech talent consulting, providing comprehensive employment services throughout Europe. Our mission is straightforward: to effortlessly connect job seekers with employers, focusing on the rapidly changing technology sector. Boasting unparalleled expertise and a steadfast commitment, we...

  • Security Engineer

    Found in: Whatjobs IN C2 - 1 week ago

    India AGS Cyber Full time

    Client A leading provider of information security services. Specializing in application security, cloud security, IoT security and payment security services Role The Security Engineer (Penetration Testing & Application Security) will make a significant contribution to the company success by integrating security into the software development lifecycle of...