7 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Conduct manual and automated security testing of web, mobile, and thick-client applications.
- Perform secure code reviews using manual techniques and Semgrep, including integration into CI/CD pipelines.
- Facilitate threat modeling and architecture reviews and provide secure design, attack-surface reduction, and defense-in-depth guidance.
- Lead initiatives to improve product security posture, development practices, controls, and guardrails.
- Triage externally reported and customer-reported vulnerabilities with Incident Response and Bug Bounty teams.
- Conduct variant and root cause analysis for high-severity P0/P1 vulnerabilities and recommend long-term remediation.
- Collaborate with product and engineering stakeholders and educate developers on secure development practices.
Requirements
- 5–8 years of experience in the security domain, specifically application or product security.
- Demonstrated expertise in web, mobile, and thick-client security testing, threat modeling, secure design reviews, and manual code reviews.
- Experience using and automating Semgrep, SAST/DAST tools, and custom scripts.
- Proficiency with Java, Kotlin, Swift, JavaScript, Python, and C#/.NET.
- Strong understanding of authentication, authorization, secure storage, and cryptographic best practices.
- Excellent communication skills for presenting security findings and recommendations to technical and non-technical stakeholders.
- Preferred experience with CI/CD security automation, container security, and AWS, GCP, or Azure environments.
- Preferred certifications include OSWE, OSCP, OSEP, GWAPT, GMOB, or equivalent.
- Preferred experience with bug bounty programs, VDPs, vulnerability triage, or security-community contributions such as blogs, talks, open-source tools, or CVEs.
Benefits
- Hybrid Bengaluru arrangement with three days per week in the local office and remaining days available for work from home; no remote arrangement.
- Applicants must reside within a reasonable commuting distance of the office.
- Approximately 5% domestic or international travel when business demands.
- Work-life balance and a transparent, communicative team environment.
Tech Stack
Categories
