Lead Security System Engineer

Mployee.me; Bengaluru; On-site; INR 4,200,000 - 5,200,000; Full time

Job summary

Mployee.me is seeking a Lead Security System Engineer in Bengaluru to own vulnerability triage, deep technical analysis, and scalable remediation patterns across apps, cloud, and supply chain. You will partner with product and development teams to advance secure SDLC and DevSecOps controls while reducing portfolio-wide risk.

Responsibilities include leading triage, analyzing findings from Checkmarx, CodeQL, Wiz, and JFrog Xray, and creating reusable fixes and playbooks for engineers.

Qualifications

• Extensive IT security experience focused on applications, cloud, and supply chain security.
• Proficiency with SAST/DAST tools (Checkmarx, CodeQL) and secure SDLC practices.
• Experience with DevSecOps practices and security automation at scale.

Responsibilities

• Lead vulnerability triage and prioritization across apps, cloud, and supply chain.
• Analyze findings from Checkmarx, CodeQL, Wiz, and JFrog Xray and drive remediation patterns.
• Develop remediation playbooks, guidance, and reusable fixes for engineers.
• Perform secure-code reviews and provide actionable recommendations to teams.
• Guide migration and integration efforts in GitHub Actions and Azure DevOps pipelines.

Skills

Application security

Cloud security

Supply chain security

Security automation

Tools

Checkmarx

CodeQL

SAST/DAST

JFrog Xray

GitHub Actions

Azure DevOps

Job description

We are looking for a Lead Security System Engineer to own vulnerability triage, deep technical analysis, and scalable remediation patterns across apps, cloud, and supply chain. You will work closely with product and development teams to advance secure SDLC and DevSecOps controls while reducing portfolio-wide risk.

Responsibilities

• Lead technical triage, validate results, and prioritize security vulnerabilities
• Analyze findings from Checkmarx, CodeQL, Wiz, and JFrog Xray
• Drive investigations across application-code, cloud-configuration, IAM, dependency, and software supply-chain vulnerabilities
• Develop proof-of-concept fixes, write remediation guidance, and create reusable fix patterns
• Perform secure-code reviews and deliver actionable recommendations to development teams
• Create remediation playbooks, runbooks, and technical guidance for engineers
• Support root-cause analysis for recurring or complex vulnerabilities
• Review engineering outputs and provide technical guidance to Senior Security Engineers
• Partner with product and development teams to strengthen secure engineering practices and reduce repeat findings
• Support vulnerability reduction planning, prioritized backlogs, risk reporting, and recurring trend analysis
• Guide GitHub repository migration, GitHub Actions and Azure DevOps pipeline migration, including runners, secrets, permissions, and deployment integrations
• Contribute to Checkmarx onboarding, DevSecOps controls, automated quality gates, and Golden Pipeline modernization

Requirements

• Extensive experience in IT with a focus on application security, cloud security, and software supply-chain security
• Expertise with Checkmarx, CodeQL, SAST/DAST, secure code review, and secure SDLC practices
• Proficiency in AWS, Wiz, IAM, and cloud configuration security
• Hands-on experience with JFrog Xray, dependency analysis, Chainguard, and SBOM concepts
• Solid background in DevSecOps, vulnerability triage, root-cause analysis, and remediation pattern development
• Proven track record in security automation and vulnerability management at scale
• Working knowledge of GitHub repository migration, GitHub Actions, and Azure DevOps pipeline migration
• Deep understanding of artifact and dependency governance, curation policies, and automated policy validation
• Demonstrated ability to lead technical teams and guide senior security engineers
• Experience contributing to large-scale, portfolio-wide security enablement programs