Software Engineer - Security

• Design, implement, and maintain secure software architectures, ensuring security is a core component from the outset.
• Conduct thorough security code reviews and vulnerability assessments to identify and remediate potential weaknesses.
• Develop and integrate security controls and mechanisms into the software development lifecycle (SDLC).
• Investigate security incidents, perform root cause analysis, and implement preventative measures.

Desired Candidate Profile

• Application Security (Web, Mobile & API Security)
• Penetration Testing & Vulnerability Assessment
• Secure Code Review
• DevSecOps & CI/CD Security
• Threat Modeling & Risk Assessment
• Cloud Security (AWS & Azure)
• Kubernetes & Container Security
• Security Architecture & Design Review
• Security Automation & Scripting (Python, Bash, PowerShell)
• Incident Response & Vulnerability Management
• Strong stakeholder management and communication skills

Required Experience / Knowledge Areas *

• 8-15 years of Information Security experience.
• Hands-on experience in application, infrastructure, and cloud security.
• Expertise in penetration testing methodologies (OWASP Top 10, OWASP API Security Top 10, Mobile Security Testing).
• Experience with DevSecOps implementation and security automation.
• Strong understanding of Kubernetes, Docker, container runtime security, and microservices security.
• Experience conducting security architecture reviews and secure design assessments.
• Knowledge of vulnerability management lifecycle and remediation practices.
• Familiarity with security frameworks including NIST, CIS Controls, and ISO 27001.
• Banking/Financial Services domain experience.

Skills

Application Security

DevSecOps

Threat Modeling