Description

You will own security engineering practices across applications, infrastructure, and cloud environments.

This role is on-site.

Responsibilities

• Perform penetration testing on web applications, mobile applications, and APIs.
• Conduct secure code reviews to identify vulnerabilities in application code and configurations.
• Configure and review results from SAST, DAST, and IaC scanning tools.
• Drive DevSecOps initiatives by integrating security controls into CI/CD pipelines.
• Contribute to security architecture design, threat modeling, and risk assessments.

Required Skills

• 7-10 years of experience in information security roles.
• Hands-on expertise in penetration testing for web, mobile, and API targets.
• Proficiency with SAST, DAST, and IaC security scanning tools.
• Deep understanding of DevSecOps principles and CI/CD pipeline security.
• Experience securing workloads in AWS and Azure, including IAM and networking.
• Familiarity with container technologies, specifically Docker and Kubernetes security.
• Strong scripting ability using Python or Bash.
• Solid grasp of security architecture and secure design principles.

Key Skills

Education

Any Graduate