Sr Security Engineer

About the role

The Senior Application Security Engineer is responsible for ensuring the security of an organization’s products throughout their lifecycle. This role also consults with security adjacent stakeholders and business units to provide suggestions, education, guidance and feedback from a security perspective.

What you'll do

• Responsible for ensuring the security of an organization’s products throughout their lifecycle
• Conduct code reviews, penetration testing, and static/dynamic analysis
• Ensure compliance with industry standards (e.g., AICPA SOC2, HIPAA, PCI DSS, SOX ISO 27001, NIST CSF)
• Integrate security tools and technologies into the CI/CD pipeline (e.g., static and dynamic application security testing (SAST/DAST)
• Planning, Collaboration and Training: Product roadmap planning with key stakeholders, collaboration with cross functional teams to develop mitigation strategies

What you need

• 5–9 yrs of experience
• Penetration testing
• ISO 27001
• CISSP
• CEH
• OWASP
• Python
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CI/CD
• Terraform
• SOX
• Security training
• Embedded C
• Roadmapping