EdgeVerve - Product Security Engineer - Penetration Testing

Job Objective :

As a Product Security Engineer, you'll play a vital role in ensuring the security of our products, particularly those catering to the financial domain. You'll be responsible for overseeing vulnerability assessments, penetration testing, and contributing to a secure development Responsibilities :

• Conduct vulnerability assessments and penetration testing on a wide range of critical web applications.
• Leverage SAST and DAST tools to identify and analyze security issues, recommending effective remediation strategies.
• Design and implement secure software systems, ensuring that security is an integral part of the software design process.
• Collaborate with the development team to apply secure design principles and patterns.
• Identify potential security vulnerabilities during the design phase and propose secure solutions.
• Perform security assessments of web services and APIs, including identity and token authentication and authorization mechanisms.
• Deep dive into existing implementations to thoroughly assess security posture.
• Collaborate with the development team to implement secure architecture and design principles.
• Stay up to date on emerging threats like DDoS, ransomware, and supply chain attacks, and implement :
• 4- 6 years of experience in product and application security with production / cloud experience
• Good knowledge in Kubernetes, Container Image, Container Image registry, CI / CD - security aspects
• Good to have AWS Cloud EKS, RDS, S3, IAM, CloudWatch Services
• Thorough understanding of HTTPS, TLS 1.2, TLS 1.3, and public / symmetric key cryptography.
• Proficiency in security tools like Burp Suite, Nmap, ZAP, Black duck Hub, NVD, and CVE / CWEs.
• Knowledge of secure implementations on cloud platforms.
• Experience with one or more of the following :
• Front-end technologies such as Angular, React, or JavaScript.
• Back-end technologies such as Java, Node.js, TypeScript, Spring, or C

Bonus Points :

(ref : hirist.tech)