Security Engineer 2

Innovaccer Inc.; Sector 10; On-site; INR 1,500,000 - 1,900,000; Full time

Job summary

Innovaccer Inc. is seeking a Security Engineer-II for Product Security to own end-to-end security across the solution. The role spans application, data, cloud security, automation, and VAPT, offering exposure to multiple security domains while contributing to secure-by-design practices.

You will perform a mix of hands-on penetration testing, security assessments, and threat modeling, while collaborating with cross-functional teams to remediate vulnerabilities and drive secure SDLC adoption.

Qualifications

• Bachelor's degree in Computer Science, IT, Cyber Security, or related field.

Responsibilities

• Perform black-box, white-box, gray-box, web/API/AI/LLM pentesting.

Skills

Penetration Testing

Security Architecture

Threat Modeling

Scripting

Automated Testing

Open Source Tools

Cloud Security

CI/CD Security

Education

Bachelor's degree in Computer Science / IT / Cyber Security

Tools

Burp Suite Pro

OWASP ZAP

Nmap

Nessus

OpenVAS

SQLMap

Metasploit

Job description

Role & responsibilities

We at Innovaccer are looking for a Security Engineer-II for Product Security who will be responsible for End to End Security of the entire solution. This role will encompass the use of a broad range of security domains (Application Security Web, Mobile & Desktop, Data Security, Cloud Security, Automation, VAPT).This role would be a great opportunity to learn and grow as you would be exposed to multiple security domains at single time.

A Day in the Life

• Perform Black Box, White Box, Grey Box, Web, API, and AI/LLM application penetration testing toidentify security vulnerabilities across products and services.
• Conduct AI/LLM security assessments and red teaming exercises in alignment with OWASP LLMTop 10 and emerging AI security best practices.
• Perform security architecture reviews, threat modeling, and secure design assessments for newproducts, features, APIs, and cloud-native applications.
• Assess applications against OWASP Top 10, OWASP API Security Top 10, OWASP LLM Top 10, andindustry security standards.
• Work closely with Product, Engineering, DevOps, Infrastructure, Platform Engineering, and SREteams to remediate security vulnerabilities and implement secure-by-design principles.
• Provide security guidance throughout the Secure Software Development Lifecycle (SSDLC),including design reviews, code reviews, and release security assessments.
• Conduct secure code reviews and assist engineering teams in implementing secure coding practices.
• Perform cloud security assessments across AWS, Azure, and GCP environments, includingcloud-native services, IAM, networking, containers, and Kubernetes.
• Collaborate with Infrastructure, Data Security, SRE, and DevOps teams to implement, validate, andperiodically test Business Continuity (BCP) and Disaster Recovery (DR) solutions
• Develop security use cases, dashboards, reports, and metrics to improve visibility into productsecurity posture.
• Develop scripts and automation to improve penetration testing, vulnerability validation, andsecurity assessment efficiency.
• Support vulnerability management by validating remediation, performing retesting, and workingwith engineering teams to drive timely closure of security findings.
• Participate in incident response activities involving application and product security when required.
• This role requires being available on call during weekends and off hours.

Preferred candidate profile

• Bachelor's degree (engineering) in Computer Science, Information Technology, Cyber Security, or a related field.
• Minimum 3-5 years of experience in Product Security, Application Security, or Penetration Testing.
• Experience conducting AI/LLM security testing and familiarity with OWASP LLM Top 10 is highly desirable.
• Hands‑on experience with penetration testing tools such as Burp Suite Professional, OWASP ZAP,Nmap, Nessus, OpenVAS, SQLMap, Metasploit, and similar tools.
• Familiarity with SAST, DAST, SCA, Container Security, Infrastructure as Code (IaC), and Secrets Scanning tools.
• Experience with AWS, Azure, and GCP cloud security, including IAM, networking, storage, compute, Kubernetes, and container security.
  Good understanding of Secure SDLC, DevSecOps, CI/CD pipelines, and modern application architectures.
• Strong knowledge of networking fundamentals, TCP/IP, HTTP/HTTPS, TLS, authentication,authorization, OAuth2, JWT, and API security.
• Good scripting and automation skills using Python, Bash, PowerShell, or similar languages.
• Strong analytical, problem‑solving, reporting, and communication skills.
• Ability to work independently, prioritize multiple assignments, and manage competing deadlines.
• OSCP, OSWE, CEH, AWS Security Specialty, or equivalent security certifications are preferred.
• Proficient in open‑source security tools and technologies.
• Willingness to work in a 24x7 support environment and take on additional responsibilities