11 months ago
Gurgaon, IndiaMid Level / Senior
Responsibilities
- Conduct application security assessments, threat modeling, and code reviews for products and services.
- Perform static, dynamic, and software composition analysis using modern security tools.
- Integrate security controls and security scans into CI/CD pipelines.
- Review and improve security architecture for web, mobile, and API-based applications.
- Strengthen cloud security posture across AWS, GCP, and Azure, including IAM, KMS, and network controls.
- Investigate product security incidents and vulnerability reports.
- Triage bug bounty findings and coordinate remediation with engineering teams.
- Document and enforce secure coding practices and security guidelines.
- Participate in design and architecture reviews to promote security-by-design principles.
- Automate security tasks and support infrastructure-as-code security validation.
Requirements
- 3 to 5 years of experience in Application Security or Product Security roles.
- Strong knowledge of the OWASP Top 10 Web, Mobile Security Top 10, and API Security Top 10.
- Experience with application, infrastructure, and secure development practices.
- Hands-on experience with Burp Suite, ZAP, Checkmarx, SonarQube, Veracode, and GitLab Security.
- Familiarity with GitHub Actions, GitLab CI, and Jenkins for CI/CD security integration.
- Knowledge of AWS, Azure, GCP, IAM, KMS, and network controls.
- Scripting knowledge in Python, Bash, or PowerShell.
- Understanding of container and Kubernetes security concepts.
- Experience with threat modeling methods such as STRIDE and PASTA is preferred.
- Familiarity with Terraform and CloudFormation security validation is preferred.
- Exposure to DevSecOps practices and security orchestration is preferred.
- CEH, OSCP, CSSLP, or AWS Security Specialty certifications are preferred.
Tech Stack
AWSAzureBashGitHub ActionsGitLab CI/CDGoogle Cloud PlatformJenkinsKubernetesPowerShellPythonSonarQubeTerraform
Categories
About Lenskart
Lenskart sells prescription eyeglasses, sunglasses, and contact lenses through an omnichannel model—e-commerce apps plus company-owned and franchised retail stores. It designs and manufactures eyewear and provides eye tests and fitting services for consumers across India and select international markets, including Singapore and the Middle East. Founded in 2008 and headquartered in Gurgaon, it is privately held.