Security Engineer
Job Location:
Monthly Salary:
Experience Required:
Posted:
Application Deadline:
Vacancies:
Job Summary
We are seeking a talented Security Engineer to join our team. The ideal candidate should have a strong background in production security DevSecOps and extensive experience with SDLC practices and multiple security tools including but not limited to Qualys Black Duck and Prisma. As a Security Engineer you will be responsible for ensuring robust security practices and implementing cutting-edge security measures to protect our systems and data.
- Vulnerability Management:
Own end-to-end vulnerability lifecycle for a given Business Unit consisting of multiple enterprise level products. (SaaS & on-prem).
Triage track Correlate and remediate vulnerabilities from tools like Black Duck Prisma Cloud Qualys Jfrog Xray etc. Understanding the working of these tools and mapping in a common tool.
Co-ordinate with business security leads to plan patching strategies and risk mitigation.
- Security Automation:
Integrate security scanning tools into common tools.
In progress and SLA tracking for all the vulnerabilities and work closely with respective business units.
Develop dashboards and reports for compliance and leadership visibility.
Write high level design to automate a few of the manual work.
- Collaboration & Governance:
Work cross-functionally with product teams and stakeholders.
Contribute to security policies standards and best practices.
Participate in incident response and post-mortem analysis.
- Education & Awareness:
Publish security advisories on high-priority vulnerabilities (CVEs).
Helping Junior team members on security aspects.
Kubernetes container build pipeline and repository platform knowledge is a plus.
Familiarity with vulnerability scoring models like CVSSEPSSBDSA
Security Tools: Black Duck Prisma Cloud Qualys Snyk Coverity SonarQube Nessus
DevOps Stack: Jenkins Kubernetes Helm Docker
Programming: Python Shell YAML JSON (Good to have)
Cloud Platforms: AWS GCP (Understanding basics of Cloud) Success Metrics
Reduction in high/critical vulnerabilities within SLA by working with security champion
Increasing automation for doing mundane tasks
Cross-team security engagement and support effectiveness
Strong communication skills.
Required Skills:
Required Skills & Experience Core Technical Skills Strong proficiency in Python SQL PySpark. Hands-on expertise with Kafka Kafka Connect Debezium Airflow Databricks. Deep experience with BigQuery Snowflake MySQL Postgres MongoDB. Solid understanding of vector data stores and search indexing. Knowledge of GCP services like Big Query Cloud Functions Cloud Run Data Flow Data Proc Data Stream etc.. Good to have Certifications: GCP Professional Data Engineer Elastic Certified Engineer AI Gemini Enterprise Vertex AI Agent Builder ADK Non-Technical & Leadership Skills Communication: Exceptional verbal and written communication skills with the ability to articulate complex technical concepts to both technical and non-technical audiences. Mentorship & Coaching: Proven experience in mentoring junior and mid-level engineers fostering a culture of continuous learning and growth. Problem-Solving: Strong analytical and debugging skills with a proactive approach to identifying and resolving technical roadblocks. Ownership & Accountability: Demonstrates a high level of responsibility for project outcomes system reliability and code quality. Agile Proficiency: Deep understanding and practical experience with Agile methodologies (Scrum/Kanban). Stakeholder Management: Ability to effectively manage expectations and build consensus across different teams. Qualifications Bachelors or Masters degree in Computer Science Engineering or a related field (or equivalent practical experience). Typically 7 years of progressive experience in data engineering with 2 years in a technical leadership or lead engineer role.
