Senior Security Engineer

HappyFox Inc.; Chennai District; On-site; INR 1,200,000 - 1,700,000; Full time

Job summary

HappyFox Inc. is seeking an experienced Security Engineer with 5+ years to join our Product Engineering teams to help keep our products secure.

You will perform manual and automated application penetration tests, identify security vulnerabilities, and collaborate with development to harden features and APIs across our stack. You will also stay updated on industry trends and help triage and resolve security findings with Engineering teams.

Qualifications

• Strong verbal and written communication skills.
• Experience in Web Application Security Testing for complex apps; mobile experience is a plus.
• Knowledge of secure software development guidelines from bodies like NIST, OWASP, SANS.
• Hands-on experience with manual and automated security assessments using security tools.

Responsibilities

• Perform manual and automated application penetration tests and provide suggestions to harden our products.
• Participate regularly in development and release process to identify and report security vulnerabilities in the code being shipped.
• Conduct regular audits on all Features/APIs of the product and report vulnerabilities to the development team.
• Keep up with industry trends in the security space.
• Triage inbound vulnerability reports and track them until resolved by Engineering teams.
• Understand NodeJS, Python and similar stacks and advise on secure development practices.
• Scale our application security engineering team.

Skills

Security testing

Vulnerability assessment

Secure SDLC

Communication

Tools

Open-source tools

Commercial tools

Job description

We're looking for an experienced Security Engineer with at-least5+ years of experience to join our Product Engineering teams to help keep our products secure.

Responsibilities:

• Perform manual and automated application penetration tests and provide suggestions to harden our products
• Participate regularly in development and release process to identify and report security vulnerabilities in the code being shipped
• Conduct regular audits on all Features/APIs of the product and reports vulnerabilities to the development team
• Keep up with industry trends in the security space
• Triage inbound vulnerability reports with appropriate level of urgency and track them until they are resolved by Engineering teams
• Should be able to understand different elements of our NodeJS, Python and similar stacks and provide guidance on secure software development practices to the team
• Scale our application security engineering team

Requirements:

• Strong verbal and written communication skills
• Has worked on Web Application Security Testing for a reasonably complex application. Mobile experience is a plus
• Good knowledge of secure software development guidelines from authoritative bodies like NIST, OWASP, SANS
• Hands on experience in performing manual / automated security assessments with open-source / commercial security tools