Lead Info Security Engineer

2 days ago

Hyderabad, Telangana, India Principal Global Services Full time ₹ 20,00,000 - ₹ 25,00,000 per year
Responsibilities
  • Experience in conducting manual Vulnerability Assessments & Penetration Testing of the following: 
  • Web Applications and APIs hosted in on-premises infrastructure. 
  • Web Applications and APIs hosted in cloud environment and using AWS services such as S3 bucket, EC2 instances, Lambda functions, API Gateway, SNS etc. 
  • Thick Client/ Desktop Applications using re-engineering techniques via tools like Echo Mirage, IDAPro, CFF Explorer, Dnspy, MS sys-internals, Wireshark, dotpeek, ghidra.
  • Think innovatively and out-of-the-box to identify techniques to exploit the vulnerabilities in our apps thereby bypassing the security controls that have been implemented. Should be able to generate impactful POC's of the vulnerabilities identified during the testing. 
  • Stay up to date with the latest application security vulnerabilities, and attack techniques and leverage those to identify similar vulns in the enterprise applications.  
  • Install, configure, use, and maintain the security tools that are being used for security testing of the applications.  
  • Meet with application team to collect information and determine scope of testing. Work closely with the application team to troubleshoot issues that impact testing (as required) 
  • Assess the risk levels of the identified vulnerabilities appropriately using CVSS scoring mechanism and do detailed documentation of the identified vulnerabilities, in a timely manner.  
  • Meet with the application teams to discuss the identified security vulnerabilities with them and provide guidance to the application teams to be able to remediate the identified security vulnerabilities.  
  • Retest application updates or deployed remediation logic to verify resolution of security vulnerabilities. 
  • Excellent communication and documentation skills to be able to write reports, update existing documentation etc. 
  • Ability to work independently and as part of a team. Should be able to mentor, guide and help the peers and/ or junior team members to learn and use new attack techniques during the security testing.
Qualifications
  • 7-9 Years of experience in conducting security testing of Web Application, Web API, Thick Client apps, mobile apps, AWS services, ideally in Finance Domain. 
  • Experience in using Web/API testing tools - Burp Suite, Postman, OWASP ZAP etc. Hands-on experience in using toolset on Kali and use it for performing advanced security testing of apps 
  • Sound knowledge of common web application security vulnerabilities (OWASP Top Ten, SANS Top 25, etc.) and programming patterns that lead to them, as well as remediation techniques. 
  • Experience in using Cloud posture security management tools such as Prisma, Wiz(preferred) etc 
Additional Information
  • Sound Knowledge of Network Protocols. 
  • Basic programming abilities in Python or similar scripting language 
  • Mobile Applications (both iOS and Android) using tools like GenyMotion, Drozer, MobSF, Android Studio.
  • Having an AWS Cloud Practioner Certification or Any other cloud certification shall be helpful. Any other security related certification like C|EH, CPent etc. Is a plus 

  • Lead Security Engineer

    1 week ago

    Hyderabad, Telangana, India JPMorganChase Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    JOB DESCRIPTIONTake on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.As a Lead Security Engineer at JPMorgan Chase within the Cyber Security & Technology Controls, you...

  • Security Engineer

    2 weeks ago

    Hyderabad, Telangana, India Williams-Sonoma, Inc. Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    About the RoleAs a Security Engineer, you will design, build, deploy, and support large, best in class enterprise level information security solutions.You're excited about this opportunity because you will...Protect the confidentiality, integrity and availability of all Williams-Sonoma information assetsDesign, deploy, manage and improve critical security...

  • Lead information Security engineer

    1 week ago

    Hyderabad, Telangana, India NTT DATA, Inc. Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    In this role, you will: Evaluate the cryptographic capabilities of multiple data protection technologies deployed across Wells Fargo networks, applications, public key infrastructure and authentication services.Utilize your strong understanding of encryption, hashing, data protection algorithms, and key management conceptsEvaluate scripts written in various...

  • QMS Support

    2 weeks ago

    Hyderabad, Telangana, India Rudhra Info Solutions Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Company DescriptionRudhra Info Solutions is a business consulting firm dedicated to delivering customized strategies and solutions. We specialize in innovative solutions for Salesforce, Mulesoft, Tableau, Veeva Vault, AWS, Data Engineering, Big Data, ServiceNow, and SAP. With a team of over 50 Salesforce Certified professionals, we transform businesses...

  • Senior DevSecOps Support Engineer

    2 weeks ago

    Hyderabad, Telangana, India Aqua Security Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    We are building a state-of-the-art security platform for large enterprises in the exciting and innovative new field of cloud security. Our open-core SaaS platform is used by thousands of developers, businesses, and enterprises to keep their cloud workloads secure. We are looking for a talented Senior DevSecOps Support Engineer to join our team to...

  • Security Engineer

    2 weeks ago

    Hyderabad, Telangana, India Avontix Full time

    Why youll want to work at nimbleThis is a great opportunity to join a well-established and market-leading brand serving a high-growth end market while gaining valuable experience and visibility to Executive leadership. As an organization, we are in considerable growth mode through acquisition and with a laser focus on positive culture building.The...

  • Tele Caller

    2 weeks ago

    Hyderabad, Telangana, India Variety Info Solutions Pvt Ltd Full time ₹ 1,04,000 - ₹ 1,30,878 per year

    Company DescriptionFounded in 2012 in Hyderabad, India, Variety Info Solutions Pvt Ltd is dedicated to empowering businesses with innovative IT solutions that drive growth, efficiency, and transformation. Specializing in computing infrastructure services, we cater to diverse industries and provide tailor-made solutions. In 2024, we expanded our reach with...

  • Lead Cloud Security Engineer

    2 weeks ago

    Hyderabad, Telangana, India Providence Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Job Title :Cloud Security Consultant/LeadExpr Range :3 Yrs. to 10 Yrs.Key Skills :Azure Cloud Security, Cloud workload management-CWM/CWPP/Azure policies/Azure defenderResponsibilitiesDesign and enforce Azure security policies to ensure compliance and governance across cloud resources.Implement and manage Azure Defender to monitor and protect workloads...

  • Security Engineer

    6 days ago

    Hyderabad, Telangana, India F5 Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Join a team using leading edge security technology and processes to protect the F5 enterprise and product environment. The Security Engineer position will execute strategic processes and implement technical solutions to enable our information security program and address day-to-day security challenges amidst the industrys evolving technology...

  • Senior Site Reliability Engineer

    4 days ago

    Hyderabad, Telangana, India Aqua Security Full time ₹ 10,00,000 - ₹ 25,00,000 per year

    We are seeking a skilled and an experienced Sr. SRE (Site Reliability Engineer) to join our dynamic SRE Platform team. As an SRE Engineer, you will play a crucial role in the design, development, and implementation of our infrastructure and deployment processes.Your primary focus will be on maintaining and improving our system's reliability, scalability, and...