5 months ago
Hyderābād, IndiaSenior
Responsibilities
- Own and operate the vulnerability management lifecycle, including continuous scanning, risk-based prioritization, remediation tracking, and remediation follow-through.
- Perform penetration testing on web applications, APIs, and cloud environments.
- Validate and triage vulnerabilities to eliminate false positives and produce actionable findings.
- Partner with engineering teams to fix vulnerabilities and prevent recurrence.
- Implement and manage SAST, DAST, dependency, infrastructure, and container scanning.
- Develop repeatable testing methodologies and automation.
- Conduct adversarial testing and exploit validation to simulate real-world attack scenarios.
- Track metrics and report on risk posture and remediation progress.
- Improve secure development practices based on security findings.
Requirements
- 5–9+ years of experience in security engineering, vulnerability management, or penetration testing.
- Hands-on experience with web and API security testing, OWASP Top 10 vulnerabilities, misconfigurations, and authentication flaws.
- Strong understanding of attack techniques and exploitation methods.
- Experience with security scanning tools and frameworks.
- Ability to analyze and validate vulnerabilities in real-world systems.
- Familiarity with cloud environments, with Azure preferred.
- Experience automating security testing in CI/CD pipelines is preferred.
- Familiarity with container and Kubernetes security is preferred.
- Experience with bug bounty or red teaming is preferred.
- Relevant certifications such as OSCP, CEH, or GWAPT are preferred.
Tech Stack
Categories
About Truveta
Truveta builds a health provider–led data platform that aggregates and de-identifies EHR data from U.S. health systems for research and clinical insights. It sells subscriptions and evidence-generation tools to life sciences companies, health systems, and researchers to support real-world data and regulatory-grade studies. Founded in 2020 and headquartered in the Seattle area, the company is privately held and backed by participating health systems.