Key Responsibilities

• Assess and mitigate security risks for web applications.
• Collaborate with engineering and security teams to ensure web application services are secure.
• Conduct penetration testing and vulnerability scanning using tools such as Burp Suite, WebInspect, and Zap.
• Help teams integrate security into the software development lifecycle and compliance activities.
• Work with partner teams on the implementation and improvement of security tools and testing methodologies.
• Educate teams on the latest threats and security best practices.
• Contribute to the security of containerized environments using Kubernetes and Docker.

Requirements

• Over all 8+ years of relevant exp in the industry and 4+ years of Security Engineering experience.
• Proficiency in scripting (Java, Python, Bash).
• Strong knowledge of web application vulnerabilities, including OWASP Top 10, cross-site scripting (XSS), SQL injection, and cross-site request forgery (CSRF).
• Experience handling security compliance tickets and working within compliance frameworks.
• Practical experience with Kubernetes, containers, and Docker.
• Hands-on experience with web application security testing tools (e.g., Burp Suite, WebInspect, Zap).
• Strong communication skills, both written and verbal, with the ability to articulate complex security concepts clearly.
• At least 1 year of experience with AWS and cloud security practices.

Posted By