Security Engineer

Compensation :

LPA

Key responsibilities:

• Work on security assessment VAPT of different web/android applications from diverse sectors.
• Create and implement automation solutions to enhance security and reduce manual effort.
• Collaborate with best security professionals to ensure the protection of the organization's information systems, data, and network infrastructure.
• Responsible for securing cloud infrastructure by designing, implementing, and monitoring security controls, ensuring compliance, and mitigating risks across cloud environments
• Triage vulnerability reports on bug bounty programs and take it to resolution within the defined SLAs.
• Develop and maintain security policies, procedures, and standards
• Perform application security reviews and threat modeling on mission-critical systems, & enterprise applications to find and address potential security risks.
• Work on staying up-to-date with the latest security threats and vulnerabilities, and recommend security improvements.
• Good communication skills to organize and lead security awareness training sessions.
• Real life social engineering simulation campaigns with the organizations.
• Bug Bounty experience is a must

What To Bring:

• In-depth knowledge of security vulnerabilities not just limited to OWASP Top 10

• Experience in doing security assessments on web applications, Android and iOS mobile applications in microservice architecture

• Experience in using the security tools to carry out manual & automated security assessments

• Experience working with common product flows like payment gateway integration, authentication etc.

• Knowledge of how applications work end-to-end which may help in multiple scenarios.

• Good knowledge & understanding of Python, Burp Suite, NMAP etc. is a must.

• Passion for security, and a practical and balanced approach to security issues

• Ability to visualize the root cause and deep dive

• Curiosity in knowing how things work in different conditions

• Independent, self-motivated and comfortable working in a fast-paced environment with teams ranging from product to engineering teams.

• Exceptional interpersonal verbal and written skills in English.

• Ability to document risks, security controls and evidence to ensure compliance

Who are we?

Apni Sec aims to deliver a Security as a Service (SECaaS) offering with different solutions consolidated on a centralized dashboard (a one-stop-shop for all your security needs). With the fast evolving needs of the world and rapid development within an organization, it becomes harder for the teams to deliver their flagship offerings to clients both securely and seamlessly. Apni Sec team comprises best security researchers and certified white hat hackers to protect organizations' data from attackers by detecting, investigating, and responding to cyber-threat. The main motto for ApniSec is to work hand-in-glove with the business, to enable them to still deliver their digital ambition without compromising on the security of their product and also of their stakeholders. This ensures that the business can build a digital info system vested in innovation, security & trust.

Our Values

• We are audacious in vision and action

• We encourage honesty and open dialogue

• We respect everyone and every point of view

• We make objective and data-driven decisions

• We believe trust and accountability go hand-in-hand

• We invest in each other's growth

• We bring our A-game and nothing else

• We take charge and get it done

Benefits Offered/Perks

• The glory. Almost too much responsibility and ownership of projects.
• Company Onsite / Fun Events.
• Work with skilled security researchers