Senior Cybersecurity Engineer
Cornerstone · Mumbai · onsite · Posted 55d ago
Undisclosed6–11 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Senior CybersecurityEngineer (India)
The Senior CybersecurityEngineer position is a hands-on role that involves evaluating and enforcingapplication security in all phases of the Software Development Life Cycle(SDLC). This position will work closely with our security and engineering teamson conducting white box security testing, threat modelling, securityassessments and support the identification, interpretation, and remediation ofvulnerabilities across a variety of applications, programming languages, andplatforms. The candidate should have a strong background in applicationsecurity, coupled with deep knowledge of AI technologies and LLMs, to protectour applications from potential security threats.
In this role you will
- Maintain security tools/processes to effectively secure our cloud-based environments and applications (AWS, GovCloud, GCP)
- Conduct white box security testing to assess and validate application security.
- Conduct security assessments and code reviews of applications in various stages of development.
- Define, maintain, and enforce application security measures for AI and LLM based applicationsand evaluate application security tools to improve our detection and prevention capabilities
- Monitor and track progress of found vulnerabilities and maintain the history
- Explain and demonstrate vulnerabilities to application/system owners, and provide recommendations for mitigation
Issue reports on assigned application and system scans - Continuously monitor and evaluate the security posture of AI/LLM applications and lead incident response efforts for security breaches related to AI and LLM applications
- Perform threat modeling exercises and risk analysis for new and existing applications.
- Research and stay up to date with the latest security vulnerabilities and best practices.
Youve got what it takesif you have
- Bachelors degree in an Information Technology related field of study or equivalent post high school education and/or work-related experience
- 6+ years of experience in application security
- Knowledge of application security focused on AI and LLM-based applications
- Knowledge of OWASP Top 10 for LLM applications
- Knowledge of information security principles, web applications, and a level of familiarity with malicious code and common techniques used by hackers
- Experience with common SDLC tools: static and dynamic code analysis, open-source management, container security, threat modeling, etc.
- Experience with HTML and JavaScript along with a solid understanding of HTTP protocol
- Experience coordinating penetration testing activities and performing penetration testing
- Experience with CI/CD practices and tools (Git, Jenkins) and integrating security solutions into CI/CD pipelines is a plus
- Experience creating solutions in C#, Python, Node.JS, or Go, and Infrastructure as Code (CloudFormation) is a plus
- Knowledge of microservices architectures is a plus
- Experience working on security responsibilities for a SaaS or PaaS solutions, preferably in AWS is a plus
- Basic knowledge of SQL and prior experience with programming in one or more server-side technologies such as ASP.NET Core is a plus.
- Thorough understanding of SDLC and software security maturity models such as Building Security In Maturity Model (BSIMM) or OWASP Software Assurance Maturity Model (SAMM) is a plus
- Experience conducting secure code development trainingis a plus
- Knowledge of cryptographic tools and/or security APIs is a plus
- Experience interacting with security vendors and customers is a plus
- Excellent problem solving and analytical skills; outstanding oral and written communication skills
- Self-motivation and the ability to work under minimal supervision are a must
- Excellent at multitasking, and open to constant learning
- Energetic and positive attitude
#LI-onsite
Sourced from naukri
Skills
Asp.Net CoreCI/CD Pipelinesanalytical thinkingapisIncident Responsegoogle cloud platformamazon web servicesai technologiesaws cloudformationHTMLContainercode analysiscloudCyber SecurityApplication SecurityCommunication SkillsInformation SecurityGITArtificial Intelligence
About Cornerstone
Cornerstone
EdTech
25
employees
2004
22 years old
Mumbai,Maharashtra
India
About
An international executive search firm, aiding organizations and leaders in finding talent while adhering to industry ethical standards across global markets.
Industries
EdTechInternet
Employee ratings
87 reviews
3.2/ 5
Culture
3.1
Career growth
2.7
Work-life
3.3
Employees rate it well for
Senior Management10Work Life Balance10Salary6Learning5Job Security4
Find them on