Security Engineer

Providence India; Hyderabad; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

A leading healthcare organization is seeking a Mid-Senior level Security Engineer in Hyderabad to enhance their application security. The ideal candidate will have 3-5 years of relevant experience and a solid understanding of security practices, including application security testing and vulnerability remediation. This full-time position involves collaborating with developers and implementing security best practices.

Qualifications

• 3-5 years of relevant experience, with at least 3 years in application security.
• Solid understanding of static, dynamic application security testing, and best practices.
• Hands-on experience in vulnerabilities remediation and reporting.

Responsibilities

• Drive software security and code security practices to meet policies.
• Participate in agile software development processes.
• Collaborate with developer teams on code scanning activities.

Skills

Application security testing

Code scanning techniques

Software security analysis

Scripting or programming (Shell, PowerShell, Python)

DevOps security best practices

Education

Bachelor’s degree in computer science, cyber security, or equivalent

Tools

SAST

DAST

SCA tools

GitHub actions

Docker

Kubernetes

Job description

Direct message the job poster from Providence India

Cybersecurity at Providence is responsible for appropriately protecting all information relating to its caregivers and affiliates, as well as protecting its confidential business information (including information relating to its caregivers, affiliates, and patients)

What will you be responsible for?

• Responsible for driving software security and code security practices that meets Providence software security policies to ensure Providence developed application code is secure and code vulnerabilities are remediated.
• Driving code security reviews and false positive analysis and shares best practices across the team.
• Identify scope for implementing security best practices and implement process workflows that strengthen the overall security posture.
• Participate in all aspects of agile software development, including design, implementation, and deployment to include code security aspects wherever needed in the application building phase.
• Troubleshoot, debug, and optimize security code remediation methods and stay ahead of with industry trends and emerging technologies related to secure code practices.

What would your work week look like?

• Collaborate with cross-functional developer teams and engage in code scanning activities within Providence code repositories (ADO and GitHub)
• Propagate and educate developer teams about secure coding practices and assist in remediating code vulnerabilities identified in the scan.
• Identify and implement secure coding practices that aligns with industry standard frameworks such as NIST, CIS and Providence information security policies etc.
• Set-up regular meeting with stakeholders to show progress of software security scans and code vulnerabilities trends.
• Clearly communicate roadmap, backlog, and team updates across the organization.

Who are we looking for?

• Bachelor’s degree in related filed, to include computer science, cyber security or equivalent combination of education and experience.
• 3-5 years of relevant post-qualification experience, with at least 3 years of proven experience in Application security testing, code scanning techniques, software security analysis and software code vulnerability remediation.
• Solid understanding of Static Software Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA) and Code Security best practices.
• Hands-on experience in DAST, SAST, SCA vulnerabilities remediation and reporting with any industry leading toolset.
• Solid understanding in CI/CD pipelines and configuration of pipelines using GitHub actions or ADO pipelines or any automated method to perform code security scans in the code build process.
• Good understanding in implementing DevOps security best practices while building solutions.
• Familiarity with cloud native solutions, application containerization and container orchestration (Docker, Kubernetes), Infrastructure as Code (IaC), helm charts and YAML template configuration.
• Solid understanding of API integrations, code testing, integration testing and UAT testing methods.
• Scripting or programming understanding with Shell scripting, Power Shell, Python, KQL etc.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Industries

  Hospitals and Health Care

Referrals increase your chances of interviewing at Providence India by 2x

Get notified about new Security Engineer jobs in Hyderabad, Telangana, India.

Senior Security Analyst, Cloud Threat Detection

Senior Network Security Engineer [T500-19491]

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.