Software Engineer - Security

Design, implement, and maintain secure software architectures, ensuring security is a core component from the outset. Conduct thorough security code reviews and vulnerability assessments to identify and remediate potential weaknesses. Develop and integrate security controls and mechanisms into the software development lifecycle (SDLC). Investigate security incidents, perform root cause analysis, and implement preventative measures.

Desired Candidate Profile

Application Security (Web, Mobile & API Security) Penetration Testing & Vulnerability Assessment Secure Code Review DevSecOps & CI/CD Security Threat Modeling & Risk Assessment Cloud Security (AWS & Azure) Kubernetes & Container Security Architecture & Design Review Security Automation & Scripting (Python, Bash, PowerShell) Incident Response & Vulnerability Management Strong stakeholder management and communication skills Required Experience / Knowledge Areas * 8-15 years of Information Security experience. Hands-on experience in application, infrastructure, and cloud security. Expertise in penetration testing methodologies (OWASP Top 10, OWASP API Security Top 10, Mobile Security Testing). Experience with DevSecOps implementation and security automation. Strong understanding of Kubernetes, Docker, container runtime security, and microservices security. Experience conducting security architecture reviews and secure design assessments. Knowledge of vulnerability management lifecycle and remediation practices. Familiarity with security frameworks including NIST, CIS Controls, and ISO 27001. Banking/Financial Services domain experience. Skills Application Security DevSecOps Threat Modeling Employment Type Full-time

Keywords