Associate InfoSec Engineer

R360 Group; Bengaluru; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Reward360 Global Services Private Limited is seeking an Associate Information Security Engineer to join our Information Security / Engineering team in Bengaluru. The role focuses on offensive and defensive security, including real-world penetration testing, vulnerability assessment, and secure code review to safeguard loyalty platforms.

You will work with development teams to promote secure software and integrate automated security checks into CI/CD.

Qualifications

• Understanding of OWASP Top 10 and OWASP API Security methodologies.
• Familiarity with PTES/OSSTMM/NIST frameworks.
• Experience with AWS environments and cloud security fundamentals.
• Hands-on knowledge of EKS and ECS security.

Responsibilities

• Offensive Security & Pentesting across web apps, microservices, APIs, and cloud infra.
• Vulnerability Assessment using manual and automated tooling.
• Secure Code Review and SAST/DAST tooling usage.
• Remediation guidance and verification re-testing with product teams.
• CI/CD integration of automated security checks in DevOps pipelines.
• Threat modeling using STRIDE, PASTA, MAESTRO for secure deployments.

Skills

OWASP Top 10

OWASP API Security

PTES/OSSTMM/NIST

AWS

EKS/ECS Security

Kali Linux

Parrot OS

Burp Suite

Caido

Nessus

Python

JavaScript

Education

B.E./B.Tech/BCA/M.Tech in CS/InfoSec

CEH / CRTP / CPTS (Good to have)

Tools

Kali Linux

Parrot OS

Burp Suite

Caido

Nessus

Job description

Company: Reward360 Global Services Private Limited

Experience: 1-2 years

Department: Information Security / Engineering

Job Overview

As an Associate Information Security Engineer at Reward360, you will be a vital part of our offensive and defensive security operations. You will focus on simulating real-world cyberattacks, identifying vulnerabilities within our core loyalty platforms, and collaborating directly with development teams to ensure a resilient infrastructure. This is an ideal role for an ambitious professional looking to bridge the gap between application security, cloud penetration testing, and secure code review.

Key Responsibilities:

• Offensive Security & Pentesting: Conduct White-Box and Grey-Box penetration testing across internally developed web applications, microservices, APIs, and cloud infrastructure with AI approach.
• Vulnerability Assessment: Utilize manual exploitation techniques alongside automated tooling to detect flaws, API security gaps, and misconfigurations before they reach production.
• Secure Code Review: Analyze source code manually and leverage
• SAST/DAST utilities to identify logical, cryptographic, and injection vulnerabilities.
• Remediation & Mitigation: Collaborate with product managers and product development software engineers to provide actionable triage, remediation guidance, and verification re-testing.
• CI/CD Integration: Assist in scaling security controls and guardrails by promoting automated security checks within the active DevOps pipelines.
• Threat Modeling: Assist with early-lifecycle threat modeling to architect secure and low-risk software deployments.Followed by STRIDE,PASTA,and MAESTRO,

Required Skills & Experience:

• Technical Capabilities & Frameworks
  • Comprehensive understanding of web and API security standards, specifically the OWASP Top 10 and OWASP API Security methodologies.
  • Practical familiarity with foundational penetration testing frameworks such as PTES, OSSTMM, or NIST.
  • Exposure to cloud computing security fundamentals, with a strong emphasis on Amazon Web Services (AWS) environments.
  • Hands-on knowledge in EKS and ECS Security
• Security Infrastructure & Tooling
  • Hands-on familiarity with penetration testing operating systems like Kali Linux or Parrot OS.
  • Everyday capability with interception proxies and security scanners, including Burp Suite, Caido, Nessus
  • Ability to script basic automation utilities using programming languages like Python or JavaScript.
• Education & Certifications (Preferred)
  • Education: B.E. / B.Tech / BCA / M.Tech in Computer Science, Information Security, or a related field.
  • Certifications (Good to have): CEH (Certified Ethical Hacker)/CRTP/CPTS