Lead Security Engineer
Huron Consulting Group28 days ago
Bengaluru, IndiaStaff+
Responsibilities
- Perform application security assessments across web, API, and internal applications using OWASP methodologies.
- Conduct DAST, SAST, and manual secure code reviews to identify vulnerabilities and provide remediation guidance.
- Perform vulnerability scanning, validation, prioritization, reporting, and remediation tracking using Tenable and related tools.
- Design and execute penetration tests across applications, networks, cloud, and infrastructure environments.
- Develop custom scripts and security tools for penetration testing, automation, and validation.
- Collaborate with application, infrastructure, operations, and security teams to assess risks and retest fixes.
- Support incident investigations, threat analysis, malware analysis, security research, and continuous security improvement initiatives.
Requirements
- Bachelor’s or master’s degree in computer science or a related field, or equivalent relevant experience.
- Experience with Burp Suite, OWASP ZAP, and other application security assessment tools.
- Strong hands-on experience with vulnerability assessment and penetration testing.
- Experience performing secure code reviews and static analysis manually and with tooling.
- Experience using Tenable, including Nessus, Tenable.sc, or Tenable.io, and tools such as Nmap and Metasploit.
- Understanding of network, application, endpoint, and infrastructure security.
- Proficiency in scripting or programming such as Python, Bash, or PowerShell for custom security tools and automation.
- Understanding of TCP/IP, DNS, HTTP/HTTPS, authentication mechanisms, and common attack techniques.
- Ability to document findings and communicate risks to technical and non-technical stakeholders.
- Knowledge or experience in threat intelligence, malware analysis, or reverse engineering is preferred.
About Huron Consulting Group
Huron Consulting Group is a global professional services firm that provides strategy, operations, digital, and technology consulting to healthcare, higher education, life sciences, and commercial organizations. Revenue comes from advisory and implementation engagements, including cloud transformations on platforms such as Workday, Salesforce, and Oracle, and software like the Huron Research Suite for universities. Founded in 2002 and headquartered in Chicago, it is a public company listed on NASDAQ.