Lead threat modeling and secure design reviews for complex, multi-service features and drive security requirements into production.
Conduct advanced vulnerability assessments and penetration testing across web platforms, APIs, and iOS and Android applications.
Plan and execute red team and purple team exercises and translate attack paths into durable architectural fixes.
Perform manual and automated source code reviews and help eliminate vulnerability classes at the framework or platform level.
Own the integration, tuning, scaling, and automation of SAST, DAST, SCA, secret scanning, and container scanning tools in CI/CD pipelines.
Drive cloud security reviews and hardening for AWS, Kubernetes/EKS, and containerized workloads, including identity, tenant isolation, network controls, and secrets management.
Contribute to AI/LLM security through threat modeling, prompt-injection and data-leakage controls, tenant isolation, and secure SDLC patterns.
Own vulnerability remediation tracking and help operate the self-managed bug bounty program.
Define security coverage, remediation SLA, and mean-time-to-remediate metrics.
Provide secure-coding guidance, security consultations, code reviews, and mentorship to SE1 and SE2 engineers.
Drive security culture initiatives and contribute to ISO 27001 readiness, TPRM, and BCP/BIA efforts.
Requirements
5–7 years of hands-on product security or application security experience with end-to-end ownership of security workstreams.
Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is preferred.
Experience leading threat modeling sessions and integrating findings into the SDLC across cross-functional teams.
Strong web and API security assessment skills, including OWASP Top 10, authentication, authorization, session management, and business-logic vulnerabilities.
Manual source code review experience and ability to reason about Java, https://jobeax.com/link/JSd7UYCSg572jJDY, Python, and React code.
Experience integrating and tuning security tooling in CI/CD pipelines and building custom security automation.
Cloud security experience with AWS or GCP and working knowledge of Docker and Kubernetes security.
Experience planning and executing red team or purple team exercises.
Working knowledge of Android and iOS application security assessments, OWASP MASVS, and mobile-specific vulnerabilities.
Familiarity with Frida, Objection, Drozer, and MobSF.
Strong analytical, problem-solving, communication, risk-prioritization, and mentoring skills.
Relevant certifications such as OSCP, OSWE, GWAPT, or CKS are beneficial.
Bug bounty participation, published CVEs, security research, conference speaking, AI/LLM security, software supply-chain security, and knowledge of India’s DPDP Act or CERT-In directions are beneficial.
Benefits
Competitive cash and equity-based compensation tailored to role, experience, and skills.
Extensive medical insurance for employees and their families, plus telehealth, wellness events, and fitness-related perks.
Generous leave policies, parental support, retirement benefits, and learning and development assistance.
... lessons into improved detections and playbooks. What you’ll bring to the role: We seek a technically proficient security professional with hands-on experience in security capabilities within complex environments. The ideal candidate will have: - Technical Security Experience: Extensive experience in security engineering, DevSecOps, ...
... scaling of security tooling (SAST, DAST, SCA, secret scanning, container scanning) in CI/CD. Design and build custom security tooling and automation that scales security across engineering teams, and contribute to supply-chain and pipeline-hardening initiatives.- Cloud Security: Drive security reviews and hardening of cloud-native ...
... (kernelmode and usermode)- Experience developing Windows drivers and lowlevel tools- Familiarity with inline assembly and reverse engineering conceptsOffensive Security Experience :- Experience with :i. Windows vulnerability research and exploit developmentii. Privilege escalation techniquesiii. Kernel exploitation fundamentals- ...
... collaboration, agility, and inclusion are at the heart of how we work and interact with each other, customers, patients and suppliers. We are currently seeking an EUC Engineer III to join our diverse and high‑performing IT Operations team. As an EUC Engineer III, you will act as a senior technical leader responsible for the design, ...
... technical operations expertise with modernization, automation, and continuous improvement. Working closely with global IT Delivery Services peers, Cloud, and Security teams, this engineer will help ensure Amtech’s hybrid environment is resilient, scalable, and aligned with security and compliance standards (SOC 2 and ISO ...
JOB DESCRIPTION Work Schedule Standard (Mon-Fri) Environmental Conditions Office Job Description Job Title : Engineer III, Software About the company Thermo Fisher Scientific Inc. is the world leader in serving science, with revenues of more than $40 billion and approximately 100,000 employees globally. Our mission is to ...
... for freight movement execution across the transportation ecosystem. As an Engineer III on the Carrier Shipment team, you will contribute as an experienced engineer who delivers reliable, high-quality outcomes while helping lead the team toward sound technical decisions. This role requires strong hands-on engineering capability ...
... logs and telemetry, and drive to clear root cause and mitigation across mobile clients, backend services, and configuration layers. - Partner closely with engineering teams (Mobile Experience, Driver Management, Routing & Dispatch, Connected Workflows, Asset Maintenance, Compliance, Product Security) to Assess impact and ...
... profiling and resolving production issues.- Build and maintain automated tests and use Agentic AI across development, documentation and testing to improve engineering productivity.- Take ownership of technical deliverables, troubleshoot complex issues and contribute to technical decisions, engineering standards and best ...
... coverage, performance benchmarks, and CI/CD automation.- Troubleshoot complex production issues, conduct RCA, and implement preventive solutions.- Mentor junior engineers and influence technical decision-making across https://jobeax.com/link/tHimJJWnl73Dwmn0 Stack & Requirements:- 5 to 8 years of backend engineering experience ...