Security Engineer

SquareShift Technologies Pte. Ltd; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

SquareShift Technologies Pte. Ltd is seeking a Security Engineer to own the vulnerability lifecycle and drive secure SDLC practices across SaaS and on‑prem products. You will triage, correlate, remediate vulnerabilities and help plan patching strategies with business security leads.

The role emphasizes security automation, dashboarding, and cross‑functional collaboration with product teams to publish advisories and improve overall security posture.

Qualifications

• Experience in end-to-end vulnerability lifecycle management for SaaS and on-prem products.
• Knowledge of SDLC security practices, vulnerability scoring models and remediation workflows.
• Hands-on with multiple security tools (Qualys, Black Duck, Prisma, Snyk, Coverity).
• Ability to develop security dashboards and automation to cut manual work.

Responsibilities

• Own vulnerability lifecycle for a business unit, coordinating patching and risk mitigation.
• Triage, track, correlate and remediate vulnerabilities across tools like Black Duck and Qualys.
• Integrate security scanning into common CI/CD and build pipelines.
• Develop dashboards and reports for compliance and leadership visibility.
• Contribute to security policies, standards, and incident response processes.

Skills

Vulnerability management

DevSecOps

Security automation

Cross-functional collaboration

Incident response

Kubernetes

Tools

Black Duck

Prisma Cloud

Qualys

Snyk

Coverity

SonarQube

Nessus

Job description

We are seeking a talented Security Engineer to join our team. The ideal candidate should have a strong background in production security, DevSecOps, and extensive experience with SDLC practices and multiple security tools, including but not limited to Qualys, Black Duck, and Prisma. As a Security Engineer, you will be responsible for ensuring robust security practices and implementing cutting-edge security measures to protect our systems and data.

Key Responsibilities

Vulnerability Management:

Own end-to-end vulnerability lifecycle for a given Business Unit consisting of multiple enterprise level products. (SaaS & on-prem).

Triage, track, Correlate and remediate vulnerabilities from tools like Black Duck, Prisma Cloud, Qualys, Jfrog Xray etc. Understanding the working of these tools and mapping in a common tool.

Co-ordinate with business security leads to plan patching strategies and risk mitigation.

Security Automation:

Integrate security scanning tools into common tools.

In progress and SLA tracking for all the vulnerabilities and work closely with respective business units.

Develop dashboards and reports for compliance and leadership visibility.

Write high level design to automate a few of the manual work.

Work cross-functionally with product teams, and stakeholders.

Contribute to security policies, standards, and best practices.

Participate in incident response and post-mortem analysis.

Publish security advisories on high-priority vulnerabilities (CVEs).

Helping Junior team members on security aspects.

Kubernetes, container build pipeline, and repository platform knowledge is a plus.

Familiarity with vulnerability scoring models like CVSS,EPSS,BDSA

Requirements

Key Technologies

Security Tools: Black Duck, Prisma Cloud, Qualys, Snyk, Coverity, SonarQube, Nessus

Programming: Python, Shell, YAML, JSON (Good to have)

Cloud Platforms: AWS, GCP (Understanding basics of Cloud) Success Metrics

Reduction in high/critical vulnerabilities within SLA by working with security champion

Increasing automation for doing mundane tasks

Cross-team security engagement and support effectiveness