Senior Security Engineer

HappyFox; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A leading technology company in Chennai is seeking an experienced Security Engineer with at least 5 years of experience. The role involves performing penetration tests, auditing products for vulnerabilities, and guiding on secure development practices. Strong communication skills and experience in web application security testing are essential. The company offers an opportunity to work on innovative security measures and contribute to application security engineering efforts.

Qualifications

• At least 5 years of experience in security engineering.
• Experience with Web Application Security Testing.
• Knowledge of NIST, OWASP, SANS guidelines.

Responsibilities

• Conduct manual and automated application penetration tests.
• Participate in the development process to identify vulnerabilities.
• Perform audits on features and APIs of the products.
• Triage vulnerability reports and track them until resolved.
• Guide the team on secure software development practices.
• Help scale the application security team.

Skills

Communication skills

Web Application Security Testing

Secure software development guidelines

Security assessments with security tools

Job description

We’re looking for an experienced Security Engineer with at-least 5+ years of experience to join our Product Engineering teams to help keep our products secure.

Responsibilities

• Perform manual and automated application penetration tests and provide suggestions to harden our products
• Participate regularly in development and release process to identify and report security vulnerabilities in the code being shipped
• Conduct regular audits on all Features/APIs of the product and report vulnerabilities to the development team
• Keep up with industry trends in the security space
• Triage inbound vulnerability reports with appropriate level of urgency and track them until they are resolved by Engineering teams
• Should be able to understand different elements of our NodeJS, Python and similar stacks and provide guidance on secure software development practices to the team
• Scale our application security engineering team

Requirements

• Strong verbal and written communication skills
• Has worked on Web Application Security Testing for a reasonably complex application. Mobile experience is a plus
• Good knowledge of secure software development guidelines from authoritative bodies like NIST, OWASP, SANS
• Hands on experience in performing manual / automated security assessments with open-source / commercial security tools