Security Engineer ll

We are seeking to hire a Security Engineer II in our InfoSec team at Mumbai. This role will be instrumental in coordinating and managing penetration tests to ensure the security and integrity of our systems. This role involves close collaboration with penetration testing vendors, tracking ongoing projects, and supporting the Information Security program through various tasks and responsibilities. The work hours will align with the UK shift.

The day-to-day responsibilities include but not limited to :

• Demonstrate understanding of red, blue, purple team testing methodologies and concepts.
• Establish Threat Models and Risk Assessment both internal infrastructure, networking, and applications.
• Assist and build out internal testing scenarios to identify potential improvements for our overall security.
• Perform internal testing to demonstrate how identified risk can be taken advantage of and advise on how best to prevent against the identified attack vector.
• Validate and test applied mitigations to determine level of effectiveness.
• Perform assessments along with Security Architecture across our various applications and technical solutions.
• Work with Infrastructure, Application and Network Engineering teams to remediate security findings.
• Assist with drafting and maintaining various security related documents.
• Have a good understanding of networking concepts and application connectivity across public cloud(s) using mTLS and REST API.
• Demonstrate understanding of OSI Layer 7 security controls and Web Application Firewalls
• Periodically assist with researching and investigating RCA of security investigations.
• Lead other security architecture team members on weekly tasks related to functional area.

Requirements :

Skills Required

threat modeling , Risk Assessment, Security Assessments