Senior Security Engineer

Job Summary

Proactively identify and reduce security threats, vulnerabilities and risks; identify & remediate outdated, vulnerable code and code libraries; provide subject matter expertise on architecture, authentication, and system security; develop security training and guidance to internal development teams; participate in the development of CoinDCX platforms by collaborating with the engineering team; consult with other Developers and Product Managers to analyze and propose application security standards, methods, and architectures; create and maintain artifacts in a protected repository established as a single source of truth; assess security tools and integrate tools as needed, particularly open-source tools; assist with recruiting activities and administrative work; professionally handle communications with independent vulnerability researchers and design appropriate mitigation strategies for reported vulnerabilities; communicate clearly on technical issues.

Responsibilities

• Proactively identify and reduce security threats, vulnerabilities and risks
• Identify & remediate outdated, vulnerable code and code libraries
• Provide subject matter expertise on architecture, authentication, and system security
• Develop security training and guidance to internal development teams
• Participate in the development of CoinDCX platforms by collaborating with the engineering team
• Consult with other Developers and Product Managers to analyze and propose application security standards, methods, and architectures
• Create and maintain artifacts in a protected repository established as a single source of truth
• Assess security tools and integrate tools as needed, particularly open-source tools
• Assist with recruiting activities and administrative work
• Professionally Handle communications with independent vulnerability researchers and design appropriate mitigation strategies for reported vulnerabilities
• Communicate clearly on technical issues

Requirements

• Minimum 4 years of experience Web, Mobile Security Assessments, Infrastructure and API security testing, red teaming.
• Must-Have core-technical Skills for: Web and Mobile Penetration Testing.
• Competence with OWASP Standards (Both Web and Mobile).
• Familiarity with tools like MobSF, Frida, Burp Suite.
• At least 2 years of experience in API Security assessment.
• Good to have - Knowledge of Cloud Security, adversary simulation, kubernetes.
• Good to have (Any one or more of the following certs) - OSCP, GPEN, CPENT, PNPT, CRTOP.

Skills

• Web Penetration Testing
• Mobile Penetration Testing
• API Security
• OWASP Standards
• MobSF
• Frida
• Burp Suite
• Cloud Security
• Kubernetes

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.