Senior Security Engineer

HappyFox Inc.; Chennai; On-site; INR 600,000 - 1,000,000; Full time

Job summary

An innovative company is seeking a skilled Security Engineer to enhance the security of its products. In this role, you will conduct manual and automated penetration tests, participate in the development process to identify vulnerabilities, and guide teams on secure software practices. Your expertise in web application security and communication skills will be crucial in triaging vulnerabilities and ensuring robust security measures. Join a forward-thinking team dedicated to staying ahead of industry trends in security and making a significant impact on product safety.

Qualifications

• 5+ years of experience in security engineering.
• Hands-on experience with manual and automated security assessments.

Responsibilities

• Conduct application penetration tests and suggest hardening measures.
• Triage vulnerability reports and track their resolution.

Skills

Web Application Security Testing

Communication Skills

Security Assessments

Knowledge of NIST, OWASP, SANS

NodeJS

Python

Tools

Security Tools

Job description

We're looking for an experienced Security Engineer with at-least 5+ years of experience to join our Product Engineering teams to help keep our products secure.

Responsibilities

• Perform manual and automated application penetration tests and provide suggestions to harden our products
• Participate regularly in development and release process to identify and report security vulnerabilities in the code being shipped
• Conduct regular audits on all Features/APIs of the product and reports vulnerabilities to the development team
• Keep up with industry trends in the security space
• Triage inbound vulnerability reports with appropriate level of urgency and track them until they are resolved by Engineering teams
• Should be able to understand different elements of our NodeJS, Python and similar stacks and provide guidance on secure software development practices to the team
• Scale our application security engineering team
  
  

Requirements

• Strong verbal and written communication skills
• Has worked on Web Application Security Testing for a reasonably complex application. Mobile experience is a plus
• Good knowledge of secure software development guidelines from authoritative bodies like NIST, OWASP, SANS
• Hands on experience in performing manual / automated security assessments with open-source / commercial security tools