Senior Cyber Security Engineer

Job Description

While technology is the heart of our business, a global and diverse culture is the heart of our success. We love our people and we take pride in catering them to a culture built on transparency, diversity, integrity, learning and growth.

If working in an environment that encourages you to innovate and excel, not just in professional but personal life, interests you- you would enjoy your career with Quantiphi

Role:Senior Cyber Security Engineer

Experience Level: 3+ Years

Work location: Mumbai, Bangalore & Trivandrum

Role & Responsibilities:

- Develop a complete understanding of a company's technology and information systems.

- Design, build, implement and support enterprise-class security systems.

- Identify and communicate current and emerging security threats

- Plan, research and design robust security architectures for any IT project.

- Perform or supervise vulnerability testing, risk analyses and security assessments.

- Create solutions that balance business requirements with information and cybersecurity requirements.

- Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.

- Set up and support code security and infrastructure security activities of DevSecOps Pipeline.

- Must have experience in cloud concepts and perform assessment and implementation of new technologies within the cloud.

- Use current programming language and technologies to write code, complete programming and perform testing and debugging of applications.

- Provide supervision and guidance to development and security teams.

- Define, implement and maintain corporate security policies and procedures.

- Respond immediately to security-related incidents and provide thorough remedial solutions and analysis.

Required Skills:

- Experience in automating security tools and processes ensuring innovation and advancement strategies that keep pace in the areas of access control, security-in-depth, secure transaction processing, secure coding practices.

- Experience in working in a high paced DevSecOps or SecOps environment with hands-on experience in Docker, Kubernetes and Cybersecurity tools like IDS, SIEM, SAST/DAST Scanners, EDR

- Experience in conducting and facilitating security reviews, threat modelling including deep design reviews throughout the development lifecycle to identify all the threats the systems are exposed to and recommended mitigations controls to address those threats.

- Hands-on knowledge in Cloud Security and AWS / GCP / Azure (good hands-on experience in at least one of them preferably GCP)

- Experience in performing penetration testing activities on Internal and large scale cloud infrastructure

- Hands-on experience in performing threat modelling and web application security assessments

- Experience in evaluating and implementing industry leading third party security tools and software

- Hands-on experience in performing vulnerability assessment and management via automation

- Effective communication skills with all the stakeholders involved.

- Skills to communicate clearly about complex subjects and technical plans with technical and non-technical audiences.

- Ability to identify risks associated with business processes, operations, technology projects and information security programs