Senior Engineer, Product Security

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status. EEO/AA/M/F/Disabled/Vets

Job Description :

Title: Senior Product Security Engineer

Location: Bengaluru

Working Type: Hybrid (Mandate to be in office for 3 days)

Job Description Details:

We are currently seeking a Senior Engineer, Product Security to join our Information Security team, based in Bangalore, Karnataka, India. The ideal candidate will possess a deep understanding of attack surfaces in modern compiled applications and operating systems.

Candidates must demonstrate the ability to analyze closed source applications using several off-the-shelf or custom developed tools. Additionally, the ideal candidate will be able to demonstrate exceptional organizational skills, work efficiently under minimal supervision, be able to deliver results that meet or exceed organization’s expectations, be a strong team player, and actively participate in a fast-paced and challenging global environment.

Key Responsibilities:

• Review code for security vulnerabilities and practices dangerous to security and privacy.
• Write custom rules on automated source code scanning tools
• Script (Python, Perl, Ruby,Java) and build automation tools on an ad-hoc basis
• Manage security integration into the CI/CD pipeline
• Manage integration with manual and automated tools for static and dynamic testing
• Identify areas for automation and tooling to increase code coverage
• Build security into infrastructure and architecture designs and guide the implementation with the operations team
• Write reports including recommendations, root cause analysis, security summary analysis, and project roadmaps
• Establish metrics and reporting to track coverage and effectiveness of security processes,work with Engineering teams to drive remediation efforts.
• Engage with product and developers to conduct security reviews and define security requirements
• Mentor junior members of the team and act as a subject matter expert for application security issues
• Conduct threat modeling and risk analysis to identify exposure and develop mitigation plans