Product Security Lead

Carl Zeiss India (Bangalore) Pvt. Ltd.; Bengaluru Urban; On-site; INR 350,000 - 550,000; Full time

Job summary

ZEISS India seeks a senior security professional to design security controls and validate that our services and applications meet the highest security standards across the secure development lifecycle. You will analyze security and coordinate mitigations with project teams.

College degree with 8–10 years of related experience and 5–6 years in multiple technical disciplines (cloud, network, app security, secure coding).

Qualifications

• College degree or equivalent and 8-10 years related work experience.
• Minimum of 5 to 6 years of professional experience with at least 2 technical disciplines (cloud security, network security, application security, mobile security, secure development methodologies, software development and coding, identity management, authentication and authorization, network architecture, system administration, and systems engineering).
• Strong experience in conducting security assessments, including penetration testing

Responsibilities

• Experience with networking protocols (TCP/IP, UDP, SSL/TLS, IPSEC, HTTP/HTTPS, BGP).
• Understanding of cryptography, web service frameworks, mobile app architectures, and service architectures (event-driven, SOA, serverless).
• Familiarity with reverse engineering or vulnerability research and with programming languages (Java, C++, Ruby, Python, Perl) for code review.
• Experience with threat modeling and design reviews to assess security implications and requirements for new technologies.

Skills

Security assessments

Penetration testing

Networking protocols

Cryptography

Java

C++

Ruby

Python

Perl

Threat modeling

Design reviews

Cross-functional teamwork

System administration

Education

College degree or equivalent

Tools

Penetration testing tools

Threat modeling tools

Job description

ZEISS in India ZEISS in India is headquartered in Bengaluru and present in the fields of Industrial Quality Solutions, Research Microscopy Solutions, Medical Technology, Vision Care and Sports & Cine Optics. ZEISS India has 3 production facilities, R&D center, Global IT services and about 40 Sales & Service offices in almost all Tier I and Tier II cities in India. With 2200+ employees and continued investments over 25 years in India, ZEISS' success story in India is continuing at a rapid pace. Further information at ZEISS India.

Design security controls and help validate that our services, applications, and emerging technologies are designed and implemented to the highest security standards and applicable best practices. Analyze the security of applications and services, discovering and addressing security issues, building security automation, and appropriately identifying the action(s) to mitigate emerging threats throughout a full secure development life-cycle (SDLC). Deploying, Migration to and Maintaining solutions in accordance with company security policies and best practices in product security in closely working with the Security Engineers of the Projects respectively Identifying, analyzing, and resolving infrastructure vulnerabilities and product security issues in closely working with the Security Engineers of the Projects respectively.

College degree or / equivalent and 8-10 years related work experience, required. Minimum of 5 to 6 years of professional experience with any combination of at least 2 technical disciplines, including the following: cloud security, network security, application security, mobile security, secure development methodologies, software development and coding, identity management, authentication and authorization, network architecture, system administration, and systems engineering.

• Strong experience in conducting security assessments, including penetration testing
• An understanding of networking and communication protocols (such as TCP/IP, UDP, SSL/TLS, IPSEC, HTTP, HTTPS, BGP)
• An understanding of cryptography, web service frameworks, mobile application architectures, and service architectures (such as event-driven, service-oriented, or serverless architectures)
• Familiarity with reverse engineering or vulnerability research, physical, infrastructure, or hardware security
• Experience with one or more programming languages (such as Java, C++, Ruby, Python, Perl) for the purpose of code review
• Experience and exposure to threat modeling and design reviews to assess security implications and requirements for introduction of new technologies
• Experience representing technical viewpoints to diverse audiences and in making timely and prudent technical risk decisions
• Experience with enterprise architecture and working as part of a cross-functional team to implement solutions

Your ZEISS Recruiting Team: Sikcha Chhetri, Upasana Sinal

Step out of your comfort zone, excel and redefine the limits of what is possible. That's just what our employees are doing every single day - in order to set the pace through our innovations and enable outstanding achievements. After all, behind every successful company are many great fascinating people. In a spacious modern setting full of opportunities for further development, ZEISS employees work in a place where expert knowledge and team spirit reign supreme. All of this is supported by a special ownership structure and the long-term goal of the Carl Zeiss Foundation: to bring science and society into the future together. Join us today. Inspire people tomorrow.

Diversity is a part of ZEISS. We look forward to receiving your application regardless of gender, nationality, ethnic and social origin, religion, philosophy of life, disability, age, sexual orientation or identity.