AI Security Engineer

EY; India; On-site; INR 800,000 - 1,200,000; Full time

Job summary

EY in India seeks a security-focused software professional to design, develop, and test secure applications. You will conduct penetration testing and vulnerability assessments to identify risks, collaborate with cross-functional teams to implement defenses, and enforce secure development lifecycle policies across projects.

The role requires 3–7 years in web application security and a strong grasp of OWASP guidelines, secure coding principles, and familiarity with WAF and IDS technologies.

Qualifications

• 3–7 years of experience in web application security or related field.
• Strong understanding of secure coding principles, including OWASP guidelines.
• Experience with injection techniques such as SQL injection attacks.
• Familiarity with web application firewalls (WAF) and intrusion detection systems (IDS).

Responsibilities

• Design, develop, test, and maintain secure software applications using secure coding practices.
• Conduct penetration testing and vulnerability assessments to identify potential security risks.
• Collaborate with cross-functional teams to implement security solutions and mitigate identified threats.
• Develop and enforce policies for secure development lifecycle processes.

Skills

Secure coding

OWASP guidelines

SQL injection

WAF

IDS

Penetration testing

Tools

WAF

IDS

Job description

Roles and Responsibilities :

• Design, develop, test, and maintain secure software applications using secure coding practices.
• Conduct penetration testing and vulnerability assessments to identify potential security risks.
• Collaborate with cross-functional teams to implement security solutions and mitigate identified threats.
• Develop and enforce policies for secure development lifecycle processes.

Job Requirements :

• 3-7 years of experience in web application security or related field.
• Strong understanding of secure coding principles, including OWASP guidelines.
• Experience with injection techniques such as SQL injection attacks.
• Familiarity with web application firewalls (WAF) and intrusion detection systems (IDS).