Description

You will own security engineering practices across applications, infrastructure, and cloud environments.

Responsibilities

• Perform penetration testing on web applications, mobile applications, and APIs.
• Conduct secure code reviews to find vulnerabilities in application code and configurations.
• Configure and review results from SAST, DAST, IaC, and container scanning tools.
• Drive DevSecOps initiatives by integrating security into CI/CD pipelines.
• Contribute to security architecture design, threat modeling, and risk assessments.

Required Skills

• 7-10 years of experience in information security roles.
• Hands-on expertise in penetration testing (web, mobile, API).
• Proficiency with security scanning tools: SAST, DAST, IaC.
• Deep understanding of DevSecOps principles and CI/CD pipeline security.
• Experience securing workloads in AWS and Azure, including IAM and networking.
• Familiarity with container technologies: Docker and Kubernetes security.
• Strong scripting ability using Python or Bash.
• Solid grasp of security architecture and secure design principles.
• Ability to translate technical risks for non-technical stakeholders.

Key Skills

Education

Any Graduate