23 hours ago
Gurgaon, IndiaMid Level / Senior
Responsibilities
- Collaborate with business stakeholders to design secure applications, assess applications for security weaknesses, and coordinate remediation.
- Perform vulnerability assessments, threat modeling, risk triage, prioritization, exception management, and remediation tracking.
- Mentor engineers and security champions on practical threat modeling techniques.
- Coordinate the orchestration, automation, and management of security technologies and platforms.
- Engineer automation solutions and security tool integrations for AppSec operations.
- Create security posture reports and define metrics, KRIs, and security scorecards to measure control effectiveness.
- Serve as an Application Security subject-matter expert and first point of contact for critical issues, risk assessments, and CI/CD issue triage.
- Evaluate requirements and implement tools, processes, and technologies that improve security posture.
- Use data to identify systemic issues, prioritize risks, and influence roadmap decisions.
- Lead projects, initiatives, and resources through direct and indirect leadership.
Requirements
- Requires 4–6 years of experience in a Security Engineering role.
- Proven experience with DevSecOps, Cloud Security, and Application Security.
- Experience with vulnerability scanning technologies, AST platforms, and cloud security tooling.
- Formal experience with threat modeling and risk assessment and prioritization.
- Experience leading projects, initiatives, and resources through direct and indirect leadership.
- Experience with AWS, Azure, and GCP cloud environments.
- Knowledge of Infrastructure as Code and Policy as Code concepts.
- Strong communication, collaboration, critical thinking, problem-solving, and relationship-building skills.
- Ability to communicate security risk effectively to technical and non-technical audiences and solve complex business and technical issues strategically.
Benefits
- Hybrid work environment with flexibility to work virtually when productive and collaborate in person when needed.
- Continuous 2–11 PM operating model supporting global systems and time zones.
- World-class benefits, competitive compensation, and performance-based rewards.
- Professional growth, learning, and development opportunities.
- Inclusive workplace with equal employment opportunities and reasonable accommodation support.
Tech Stack
Categories
About Gartner
Gartner is a public research and advisory firm that sells subscription research, consulting, and conferences to CIOs and business leaders at large enterprises and governments. Its offerings include market analysis (e.g., Magic Quadrant), peer benchmarks, expert advisory, and events. Founded in 1979 and headquartered in Stamford, Connecticut, Gartner trades on the NYSE (ticker: IT) and is a member of the S&P 500.