Lead Info Security Engineer

2 days ago

Hyderabad, Telangana, India Principal Global Services Full time ₹ 20,00,000 - ₹ 25,00,000 per year
Responsibilities
  • Experience in conducting manual Vulnerability Assessments & Penetration Testing of the following: 
  • Web Applications and APIs hosted in on-premises infrastructure. 
  • Web Applications and APIs hosted in cloud environment and using AWS services such as S3 bucket, EC2 instances, Lambda functions, API Gateway, SNS etc. 
  • Thick Client/ Desktop Applications using re-engineering techniques via tools like Echo Mirage, IDAPro, CFF Explorer, Dnspy, MS sys-internals, Wireshark, dotpeek, ghidra.
  • Think innovatively and out-of-the-box to identify techniques to exploit the vulnerabilities in our apps thereby bypassing the security controls that have been implemented. Should be able to generate impactful POC's of the vulnerabilities identified during the testing. 
  • Stay up to date with the latest application security vulnerabilities, and attack techniques and leverage those to identify similar vulns in the enterprise applications.  
  • Install, configure, use, and maintain the security tools that are being used for security testing of the applications.  
  • Meet with application team to collect information and determine scope of testing. Work closely with the application team to troubleshoot issues that impact testing (as required) 
  • Assess the risk levels of the identified vulnerabilities appropriately using CVSS scoring mechanism and do detailed documentation of the identified vulnerabilities, in a timely manner.  
  • Meet with the application teams to discuss the identified security vulnerabilities with them and provide guidance to the application teams to be able to remediate the identified security vulnerabilities.  
  • Retest application updates or deployed remediation logic to verify resolution of security vulnerabilities. 
  • Excellent communication and documentation skills to be able to write reports, update existing documentation etc. 
  • Ability to work independently and as part of a team. Should be able to mentor, guide and help the peers and/ or junior team members to learn and use new attack techniques during the security testing.
Qualifications
  • 7-9 Years of experience in conducting security testing of Web Application, Web API, Thick Client apps, mobile apps, AWS services, ideally in Finance Domain. 
  • Experience in using Web/API testing tools - Burp Suite, Postman, OWASP ZAP etc. Hands-on experience in using toolset on Kali and use it for performing advanced security testing of apps 
  • Sound knowledge of common web application security vulnerabilities (OWASP Top Ten, SANS Top 25, etc.) and programming patterns that lead to them, as well as remediation techniques. 
  • Experience in using Cloud posture security management tools such as Prisma, Wiz(preferred) etc 
Additional Information
  • Sound Knowledge of Network Protocols. 
  • Basic programming abilities in Python or similar scripting language 
  • Mobile Applications (both iOS and Android) using tools like GenyMotion, Drozer, MobSF, Android Studio.
  • Having an AWS Cloud Practioner Certification or Any other cloud certification shall be helpful. Any other security related certification like C|EH, CPent etc. Is a plus 

  • Lead IT Risk and Security Engineer

    7 days ago

    Hyderabad, Telangana, India DTCC Candidate Experience Site Full time ₹ 10,00,000 - ₹ 12,00,000 per year

    Lead Cloud Security Engineer The Cloud Security Engineering team provides best in class cloud security services to the enterprise securing the workloads, application and data in AWS, Azure and GCP. This position is for a Lead Cloud Security Engineer.This position focuses on Cloud Security Capabilities in AWS, Azure and GCP, as well as providing Subject...

  • Lead IT Risk and Security Engineer

    7 days ago

    Hyderabad, Telangana, India DTCC Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    DescriptionLead Cloud Security Engineer The Cloud Security Engineering team provides best in class cloud security services to the enterprise securing the workloads, application and data in AWS, Azure and GCP. This position is for a Lead Cloud Security Engineer.This position focuses on Cloud Security Capabilities in AWS, Azure and GCP, as well as providing...

  • Client Services Team Lead

    2 weeks ago

    Hyderabad, Telangana, India Ezone Security Solutions Pvt. Ltd. Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    **JobDescription:Team Lead-Services**Location: HyderabadCompany Name: Ezone Security Solutions Private LimitedWebsite: Responsible for achieving the set targets for Service team members in the respective Region both revenue wise as well as customer satisfaction.List out the Service calls pending as per eCare, prioritize and assign the calls to the team,...

  • Lead Security Engineer

    7 days ago

    Hyderabad, Telangana, India JPMorganChase Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    JOB DESCRIPTIONTake on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.As a Lead Security Engineer at JPMorgan Chase within the Cyber Security & Technology Controls, you...

  • Security Engineer

    1 week ago

    Hyderabad, Telangana, India Avontix Full time

    Why youll want to work at nimbleThis is a great opportunity to join a well-established and market-leading brand serving a high-growth end market while gaining valuable experience and visibility to Executive leadership. As an organization, we are in considerable growth mode through acquisition and with a laser focus on positive culture building.The...

  • B2B Corporate Sales- 99 Acres- Hyderabad

    1 week ago

    Hyderabad, Telangana, India Info Edge Full time ₹ 4,00,000 - ₹ 12,00,000 per year

    MEGA HIRINGTitle: B2B Corporate Sales Manager- 99Acres.ComHow to ApplyInterested candidates are required to Walk In at the below mentioned address Also mention recruiter name Mohit on your resume.Date- 14th & 15th Nov 2025Venue- Vasavi's MPM Grand -1211, 11th Floor, Vasvi MPM, Grand Yella Reddy Layout, Amerpreet, Hyderabad, Telengana-500073Required...

  • Senior Mobile App Developer

    2 weeks ago

    Hyderabad, Telangana, India Info Services Full time ₹ 6,00,000 - ₹ 18,00,000 per year

    Mobile App DeveloperHyderabad or ChennaiFull-time with Info ServicesSalary: OpenNotice:Max 2 weeksJob Summary:We are seeking a skilled Mobile App Developer with expertise in Kotlin Multiplatform Mobile (KMM) to build and maintain cross-platform applications for Android and iOS. The ideal candidate will have experience in native UI development, API...

  • Security Engineer

    2 weeks ago

    Hyderabad, Telangana, India Foodsmart Full time ₹ 6,00,000 - ₹ 18,00,000 per year

    |About us:Foodsmart is the leading telenutrition and foodcare solution, backed by a robust network of Registered Dietitians. Our platform is designed to foster healthier food choices, drive lasting behavior change, and deliver long-term health outcomes. Through our highly personalized, digital platform, we guide our 2.2 million members—including those in...

  • Security Engineer

    2 weeks ago

    Hyderabad, Telangana, India Yext Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    The Information Security Engineer is responsible for the implementation, execution and maintenance of technology solutions to mitigate risk, to protect the IT and Engineering environments by reducing the probability of, and minimizing the effects of, damage caused by malware, malicious activities and security events.The individual will help protect the...

  • Security Engineer

    5 days ago

    Hyderabad, Telangana, India Talent21 Management Shared Services Pvt. ltd. Full time ₹ 5,00,000 - ₹ 15,00,000 per year

    Security Engineer (System & Cloud Security) - Experience in System and Cloud (Azure & O365) Security Microsoft Defender (ATP , Endpoint , Identity?.) configuration , settings?. Alerts are received and treated by a different team (Cyber Security Operation) Intune , W365 , AVD (only Security part like security settings , as Intune management is under a...