Senior Engineer

Honeybee Tech Solutions; Navi Mumbai; On-site; INR 1,600,000 - 2,800,000; Full time

Job summary

Honeybee Tech Solutions in Mumbai is seeking an experienced SSDLC Sr. Engineer to drive secure software development life cycles across projects. You will assess security controls, perform SCA/DAST/SAST, and collaborate with product teams to embed security into Agile delivery.

The role requires 3–5 years in security engineering, strong knowledge of OWASP/NIST, and effective communication with stakeholders. Immediate joiner preferred, with exposure to microservices and cloud platforms like VMware.

Qualifications

• Experience in Secure SDLC methodologies for Waterfall/ Agile software development (Mandatory).
• Security best practices like OWASP and NIST guidelines (Mandatory).
• Ability to perform security review of microservices architecture and API security (Mandatory).
• Hands-on experience with SAST, DAST, and SCA (Mandatory).
• Hands-on experience in Tech Stack Review (Mandatory).
• Comfortable working in an Agile environment with stakeholders.
• Good knowledge of Cloud platforms and VMware.
• Threat modelling with PASTA/STRIDE is a plus.
• Ability to communicate effectively with stakeholders and maintain high integrity.
• Strong analytical and problem-solving skills.

Responsibilities

• Perform security best practices review followed by Development team.
• Perform SCA and report vulnerabilities with recommendations.
• Perform Tech Stack review and report findings with recommendations.
• Perform code review supporting SAST Tool and report valid security issues.
• Perform DAST on applications and report valid security issues.
• Contribute to RFP process and implement SSDLC tools.
• Escalate issues and risks and take ownership for resolution.
• Track milestones and provide regular status reports to stakeholders.

Skills

Secure SDLC

OWASP

NIST guidelines

API security

SAST

DAST

SCA

Threat modelling

Cloud/VMware

Tools

SAST Tool

DAST Tool

SCA Tool

Threat Modelling Tools

Job description

Job Summary

We are hiring for SSDLC Sr. Engineer for a big company (Mumbai location).

Role: SSDLC Sr. Engineer

Experience: 3-5 years

Notice period: Immediate joiner

Reporting structure: Reports to the Platform Software Security Services Lead/Manager

JD in detail

• Experience in the following process areas: Secure SDLC Methodologies for Waterfall/ Agile software development (Mandatory)
• Security best practices like OWASP and NIST guidelines (Mandatory)
• Ability to perform security review of microservices architecture, API Security (Mandatory)
• Hands on experience on Source Code reviews - SAST solution (Mandatory)
• Hands on experience on Dynamic Application Security Testing - DAST (Mandatory)
• Hands on experience in Software Composition Analysis - SCA (Mandatory)
• Hands on experience in performing Tech Stack Review (Mandatory)
• Comfortable working in an environment that practices Agile development, engaging Product Owner and other stakeholders
• Good knowledge of Cloud platform/VMware
• Ability to identify vulnerabilities threat actors in the application cycle and communicate effectively to the stakeholders. Threat Modelling PASTA, STRIDE etc (Good to Have)
• Possesses ability to quickly understand the technical and functional aspects of the project to be able to communicate effectively with different stakeholders.
• Excellent written and verbal communication skills in English, high integrity, strong work ethic and ability to empathize with the customer.
• Ability to work effectively in a fast-paced, project-oriented environment
• Ability to prioritize and execute tasks
• Ability to handle sensitive and confidential information
• Strong analytical and problem-solving skills

Responsibilities

• Perform security best practices review followed by Development team
• Perform SCA and report vulnerabilities and recommendations
• Perform Tech Stack review and report findings along with recommendations.
• Perform code review (supporting SAST Tool) and remove false positives if any, and report valid security issues to development team
• Perform DAST on the various applications and remove false positives if any, and report valid security issues to development team
• Contribution to RFP process and assist in Implementing SSDLC Tools.
• Escalate issues and risks and proactively takes ownership for resolution
• Track milestones and deliverables and provide regular status reporting to respective stakeholders

Certifications

• CSSLP/CISSP/SSCP or equivalent certification are desirable (Good to Have).
• Application/API Security Threat Modelling/API Security product Implementations, Specialisation or OWASP certifications or Agile Certifications are a plus