News Corp

Senior Engineer, Product Security

Analyst, Cyber Threat Intelligence

Senior Data Engineer

Video Research Specialist

Data Engineer

Senior Engineer, Wordpress Development

Senior Product Security Engineer responsible for reviewing code for vulnerabilities, writing custom rules for automated source code scanning, managing security integration into CI/CD pipelines, identifying areas for automation, building security into infrastructure, writing reports and recommendations, establishing metrics, working with engineering teams on remediation, conducting security reviews, threat modeling, risk analysis, mentoring junior team members, and acting as a subject matter expert.  The ideal candidate possesses deep understanding of attack surfaces in modern applications and operating systems and can analyze closed source applications using various tools. The role requires proficiency in multiple programming languages, DevOps principles, cloud security (AWS/Azure), and experience with application security tools.

<div class="jobs-box__html-content jobs-description-content__text t-14 t-normal
 jobs-description-content__text--stretch" id="job-details" tabindex="-1">
 <h2 class="text-heading-large">
 About the job
 </h2>

 <div class="mt4">
 
 Equal Opportunity Employer All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status. EEO/AA/M/F/Disabled/Vets Job Description : Title: Senior Product Security Engineer Location: Bengaluru Working Type: Hybrid (Mandate to be in office for 3 days) Job Description Details: We are currently seeking a Senior Engineer, Product Security to join our Information Security team, based in Bangalore, Karnataka, India. The ideal candidate will possess a deep understanding of attack surfaces in modern compiled applications and operating systems. Candidates must demonstrate the ability to analyze closed source applications using several off-the-shelf or custom developed tools. Additionally, the ideal candidate will be able to demonstrate exceptional organizational skills, work efficiently under minimal supervision, be able to deliver results that meet or exceed organization’s expectations, be a strong team player, and actively participate in a fast-paced and challenging global environment. Key Responsibilities: <ul><li>Review code for security vulnerabilities and practices dangerous to security and privacy.</li><li>Write custom rules on automated source code scanning tools</li><li>Script (Python, Perl, Ruby,Java) and build automation tools on an ad-hoc basis</li><li>Manage security integration into the CI/CD pipeline </li><li>Manage integration with manual and automated tools for static and dynamic testing</li><li>Identify areas for automation and tooling to increase code coverage</li><li>Build security into infrastructure and architecture designs and guide the implementation with the operations team</li><li>Write reports including recommendations, root cause analysis, security summary analysis, and project roadmaps</li><li>Establish metrics and reporting to track coverage and effectiveness of security processes,work with Engineering teams to drive remediation efforts.</li><li>Engage with product and developers to conduct security reviews and define security requirements</li><li>Mentor junior members of the team and act as a subject matter expert for application security issues</li><li>Conduct threat modeling and risk analysis to identify exposure and develop mitigation plans </li></ul>
Requirements: <ul><li>Bachelor’s degree in computer science, software engineering or equivalent experience</li><li> 3 to 5 years of software development with at least 2 years in developing secure systems.</li><li>Experience in one or more of the following modern languages/frameworks - Python, Java,Ruby, node.js, JavaScript, PHP</li><li>Proficiency in version control tools like Git. </li><li>Thorough understanding of DevOps principles and building code pipelines </li><li>Experience with cloud security, particularly for AWS and/or Azure Experience with integrating security into a DevOps culture. Familiarity with Docker images, AWS Secrets Manager and Parameter Store.</li><li>A strong understanding of modern development processes including agile development </li><li>Solid understanding of application security topics such as authn, authz, encryption, session management, Identity Federation (Open ID, OAuth, SAML) </li><li>Extensive experience with application security tools like code scanners(Checkmarx,Fortify,Synk, Nexus) and dynamic analysis tools (Burp,Zap etc) </li><li>Experience with common information security management frameworks like NIST CSF, NIST SP 800,OWASP</li><li>Hands-on with AWS and how to deploy/run Python applications in the cloud.</li><li>Hands-on experience with OWASP Top 10 standards, including mitigation of common threats like SQL Injection and Cross-Site Scripting etc. </li></ul>
Minimum Qualifications: <ul><li>3 to 5 years of software development with at least 2 years in developing secure systems.</li><li>Experience in one or more of the following modern languages/frameworks - Python, Java,Ruby, node.js, JavaScript, PHP</li><li>Proficiency in version control tools like Git. </li><li>Thorough understanding of DevOps principles and building code pipelines</li><li>A passion for application security related problems.Working knowledge of web application vulnerabilities and mitigations.</li><li>Known for being a great communicator and collaborator with excellent written and verbal communication skills </li></ul>
Additional licensing, certifications preferred: <ul><li> Security Certifications </li><li> Programming Certifications </li></ul>
This job is posted with NTS Technology Services Pvt. Ltd. Job Category:
 
 </div>
 </div>