Senior Lead Engineer Information Security

Majesco; Navi Mumbai; Presencial; INR 4.000.000 - 7.000.000; Tempo integral

Benefícios oferecidos por esta vaga

Resumo da vaga

Majesco in Navi Mumbai, Maharashtra, India, seeks a Security Engineering professional to design, implement, and maintain enterprise security controls across cloud, infrastructure, and applications. You will evaluate threats, develop standards, and guide secure architectures in collaboration with engineering teams.

Key responsibilities include security automation in CI/CD, application security testing (SAST/DAST), WAF management, pen-testing, and incident response support to strengthen the

Qualificações

• Experience designing enterprise security across cloud, on-prem, and apps.
• Ability to evaluate threats and improve security architectures.
• Experience with CI/CD security integration and automation.
• Lead security reviews, SAST/DAST, and software supply chain security.
• Hands-on with OWASP Top 10 and API security testing.

Responsabilidades

• Design, implement, and maintain security controls across cloud, infra, and apps.
• Develop security standards and guidance to improve posture.
• Integrate security into CI/CD pipelines and automation.
• Lead threat modeling, code reviews, and SAST/DAST.
• Manage WAF rules and edge security protections.
• Conduct penetration tests and coordinate remediation.
• Support security incidents and mentor teams.

Conhecimentos

Security Eng

DevSecOps

Threat Modeling

SAST/DAST

WAF

Pen Testing

CI/CD

Cloud Security

Ferramentas

GitHub Actions

SCA

OSS Security

Descrição da vaga

Job Description:

Key Responsibilities

Security Engineering & Architecture

• Design, implement, and maintain enterprise security controls across cloud, infrastructure, and application environments.
• Evaluate emerging threats and technologies and recommend improvements to the organizations security architecture.
• Develop security standards, engineering patterns, and technical guidance to improve the overall security posture.

Security Automation & DevSecOps

• Design and develop security automation solutions that improve operational efficiency and reduce manual effort.
• Integrate security controls and validation activities into CI/CD pipelines and software delivery workflows.
• Build and maintain GitHub Actions and related automation to support secure development practices.
• Automate vulnerability management, policy enforcement, reporting, and remediation tracking activities.

Application Security

• Lead security engineering efforts focused on protecting internally developed applications and APIs.
• Perform and coordinate:
  • Threat modeling
  • Secure design and architecture reviews
  • Secure code reviews
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Software Composition Analysis (SCA)
  • Open-source dependency and supply chain security reviews
  • Secret and credential exposure detection
  • API security testing and assessments
  • CI/CD pipeline security reviews
  • Security validation of application deployments
• Partner with development teams to identify, prioritize, and remediate security risks.

Web Application Firewall (WAF) & Edge Security

• Design, implement, and maintain Web Application Firewall (WAF) capabilities.
• Develop and tune security rules, attack detection logic, bot mitigation, rate limiting, and application-layer protections.
• Continuously monitor and improve protections against OWASP Top 10 and emerging web application threats.

Offensive Security & Penetration Testing

• Conduct application red team exercises and adversarial security assessments.
• Perform manual and automated penetration testing of web applications, APIs, and supporting services.
• Simulate real-world attack techniques to identify weaknesses in application design, authentication, authorization, and deployment architectures.
• Document findings, provide remediation guidance, and validate corrective actions.

Collaboration & Security Operations Support

• Partner with engineering, infrastructure, and cloud teams to implement secure solutions.
• Support incident response investigations involving applications, cloud services, and development platforms.
• Provide technical leadership and mentorship on security engineering practices and security tool adoption.

Success Measures

• Increased automation and efficiency of security processes.
• Successful integration of security controls into engineering and CI/CD workflows.
• Reduction of application and cloud security risks.
• Effective implementation and management of WAF protections.
• Timely identification and remediation of vulnerabilities.
• Successful execution of penetration testing and red team activities.
• Improved security posture across applications, APIs, and software delivery platforms.

Requirements: