Security Engineer-2

2 weeks ago

Bengaluru Karnataka, India Cashfree Payments Full time

**Responsibilities**:

- Examine the products in detail to discover vulnerabilities and collaborate with the other security engineers to practically demonstrate the exploitability and risk factors.
- Be on the forefront of emerging vulnerabilities/threats that could affect Cashfree products through independent research and study.
- Engage with the developers in developing workarounds/mitigation plans and ensure they are implemented per policy.
- Threat Modelling: Engage with the development teams to conduct secure design reviews/threat modeling exercise to enumerate threats and mitigation strategies.
- Enable the developers with knowledge of threat modeling by conducting focused workshops.
- Secure Coding: Priorities critical defects and ensure these are identified and mitigated during the sprint.
- Integration and automation of SAST in the DevOps pipeline.
- Build secure coding principles and propagate them across the development community.
- Be the to-go person for developers in solving critical issues relating to secure product development.
- Build and enhance secure coding / security assessments training contents for developers and QA team.
- Deliver training programs at various levels in the organizations.
- Conduct workshops/security tech-talks to disseminate security knowledge and awareness. Qualifications.
- Good knowledge in multiple classes of vulnerabilities that includes cross-site scripting, SQL Injection, CSRF, cryptographic related weakness, and code injection.
- Good knowledge of any programming/scripting languages such as Java, Ruby, and Python.
- Good knowledge relating to services/technology relating to the cloud.
- Ability to automate security testing and improve productivity in security assessments.
- Ability to communicate and interpret security vulnerabilities to various audiences such as development and management teams.

**Requirements**:

- You have great interpersonal skills, deep technical ability, and a history of successful execution in the assessments industry. If you enjoy discussing anything from procedural linking tables in kernels to remote code execution in JVMs, then we want you on the team.
- Familiarity with industry-standard threat modeling, risk modeling, and vulnerability classification.
- Experience with pre-assessment architectural and API analysis to scope and prepare white-box and grey-box assessments.
- Experience working with in-house engineering organizations, S-SDLC/CICD software lifecycle and QA processes
- B. Tech. in Computer Science, Electrical, or Computer Engineering, or equivalent work experience as a software engineering or security practitioner.
- Possess a broad knowledge of attack vectors, exploits, and mitigations that work at scale or may be linked together for chained attacks.
- Experience with Java, Go, Python, or Node.js (bonus points for more than one).
- Experience with assessing Cloud-native services, service meshes, and K notes-platform-based micro-services.
- Be able to think both offensively (like a hacker) and defensively (evaluating product security and design)

  • Security Engineer 2

    2 days ago

    Bengaluru, India Procore Technologies Full time

    Job DescriptionWe’re looking for a Security Engineer  2 to join Procore’s Security Engineering team. In this role, you’ll be a key contributor, focused on building, implementing, and operating the foundational security controls that protect our platform, data, and users. Your primary goal is to help build and maintain a secure, scalable, and resilient...

  • Security Engineer 2

    2 days ago

    Bengaluru, Karnataka, India Procore Technologies Full time ₹ 12,00,000 - ₹ 24,00,000 per year

    Job Description We're looking for a Security Engineer 2 to join Procore's Security Engineering team. In this role, you'll be a key contributor, focused on building, implementing, and operating the foundational security controls that protect our platform, data, and users. Your primary goal is to help build and maintain a secure, scalable, and resilient cloud...

  • Security Engineer 2

    1 day ago

    Bengaluru, Karnataka, India Procore Technologies Full time ₹ 12,00,000 - ₹ 24,00,000 per year

    Job Description We're looking for a Security Engineer 2 to join Procore's Security Engineering team. In this role, you'll be a key contributor, focused on building, implementing, and operating the foundational security controls that protect our platform, data, and users. Your primary goal is to help build and maintain a secure, scalable, and resilient cloud...

  • Security Engineer 2

    1 day ago

    Bengaluru, Karnataka, India 0a7e53a3-7d15-4986-b03a-8f029ea434cb Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Job DescriptionWe're looking for a Security Engineer 2 to join Procore's Security Engineeringteam. In this role, you'll be a key contributor, focused on building, implementing, and operating the foundational security controls that protect our platform, data, and users. Your primary goal is to help build and maintain a secure, scalable, and resilient cloud...

  • Security Officer

    1 week ago

    Gunjur, Bengaluru, Karnataka, India Sentinel Security Full time

    Security officer who will be responsible for a gated community in gunjur handling 30 guards. Responsible for recruitment, training and handling site issues. Room provided for free **Benefits**: - Health insurance - Provident Fund Schedule: - Day shift **Education**: - Secondary(10th Pass) (preferred) **Experience**: - total work: 3 years...

  • Security Engineer 2

    2 days ago

    Bangalore, Karnataka, India ORACLE Full time

    Job Category Information Security Engineer Minimum of 5 years related experience in an information security role supporting security programs and security engineering architecture in complex enterprise environments Hands on experience on endpoint security and logging security Research and evaluate new security technologies and make recommendations for...

  • Security Engineer-2

    6 days ago

    Bengaluru, India Cashfree Payments Full time

    Job Description Responsibilities: - Examine the products in detail to discover vulnerabilities and collaborate with the other security engineers to practically demonstrate the exploitability and risk factors. - Be on the forefront of emerging vulnerabilities/threats that could affect Cashfree products through independent research and study. - Engage with the...

  • Principal Application Security Engineer I

    1 week ago

    Bengaluru, India RSA Security Full time

    Product Overview Outseer Fraud Manager is an advanced, omnichannel fraud detection hub that provides risk-based, multi-factor authentication for organizations seeking to protect their consumers from fraud across digital channels. Powered by the AI/ML based Risk Engine, Outseer Fraud Manager is designed to measure the risk associated with a user’s login...

  • Senior Security Automation Engineer

    2 days ago

    Bengaluru, India Symosis Security Full time

    About Symosis SecuritySymosis is a fast-growing US cybersecurity and engineering firm building real, high-impact security automation for some of the largest tech companies in the world.We move fast, solve hard problems, and ship clean, production-grade engineering — not slides, not theory. If you want to work on serious API engineering, data pipelines,...

  • Security Supervisor

    5 days ago

    Bengaluru, Karnataka, India Black Belt Security Group Full time ₹ 12,00,000 - ₹ 39,20,400 per year

    Job Title: Security SupervisorLocation: Mahadevpura, BangaloreJob Description:We are hiring a Security Supervisor to oversee day-to-day security operations at our Mahadevpura location and ensure a safe and secure environment for staff, visitors, and assets.Key Responsibilities:Supervise and manage a team of security guards.Assign daily duties, monitor...