MUMBAI · FULLTIME
Sr Cybersecurity Engineer
JioStar
Mumbai · onsite · Posted 30d ago
Sourced from
Undisclosed3–6 yrsfulltimeMumbai
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.5s
- Found the form on Naukri · 8 questions to answer1.8s
- Decided the answers for all of them2.8s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Role Summary:
As an Application Security Engineer at JioStar, you will play a critical role in securing our applications, products, and user data across a large-scale, cloud-native streaming ecosystem. You will work closely with engineering, product, and security teams to embed security throughout the software development lifecycle, identify and remediate vulnerabilities, and drive secure-by-design practices across web, mobile, and backend applications.
This role requires strong expertise in application security, secure coding practices, security testing, and threat modeling, along with the ability to collaborate with engineering teams to build secure and resilient products at scale.
About Us:
Perched firmly at the nucleus of spellbinding content and innovative technology, JioStar is a leading global media entertainment company that is reimagining the way audiences consume entertainment and sports. Its television network and streaming service together reach more than 750 million viewers every week, igniting the dreams and aspirations of hundreds of million people across geographies.
Key Responsibilities:
- Drive application security across the software development lifecycle, from design and development to deployment and production
- Conduct security assessments and identify vulnerabilities across web, mobile, APIs, backend services, and other application components
- Perform and support application security testing, including SAST, DAST, SCA, API security testing, and penetration testing
- Conduct threat modeling and security reviews for new features, products, and architectural changes, and provide actionable remediation recommendations
- Partner with engineering and product teams to identify security risks and implement secure-by-design and secure-by-default practices
- Review application architecture, design, and code to identify security weaknesses and recommend appropriate security controls
- Help define and maintain secure coding standards, application security guidelines, and security best practices across engineering teams
- Work with development teams to triage, prioritize, and remediate vulnerabilities based on severity, business impact, and exploitability
- Integrate security tools and automated security checks into CI/CD pipelines to enable continuous security testing and shift-left security practices
- Develop automation and tooling using Python, Shell, or similar languages to improve application security processes and scale security assessments
- Assess third-party libraries, dependencies, APIs, and open-source components for security risks and vulnerabilities
- Support security incident investigations by analysing application logs, attack patterns, vulnerabilities, and potential areas of compromise
- Collaborate with engineering teams to address security risks related to authentication, authorization, session management, encryption, data protection, and API security
- Contribute to security reviews for web and mobile applications, including identifying common vulnerabilities such as OWASP Top 10 and OWASP API Security risks
- Help prepare security documentation, risk assessments, remediation reports, and evidence required for audits and compliance activities
- Stay updated on emerging application security threats, attack techniques, vulnerabilities, and industry best practices, and translate them into actionable security improvements
Skills and attributes for success:
- Hands-on experience in Application Security, Product Security, or Software Security Engineering
- Strong understanding of web, mobile, API, and backend application security
- Good understanding of OWASP Top 10, OWASP API Security Top 10, secure coding practices, and common application vulnerabilities
- Experience with application security testing tools and methodologies, including SAST, DAST, SCA, API security testing, and penetration testing
- Experience with threat modeling, security architecture reviews, and secure SDLC practices
- Familiarity with common authentication and authorization mechanisms, encryption, API security, and data protection principles
- Experience integrating security tools and controls into CI/CD and DevSecOps workflows
- Strong scripting/programming skills in Python, Shell, Java, JavaScript, or similar languages
- Experience with vulnerability management, security risk assessment, and remediation tracking
- Strong analytical, troubleshooting, problem-solving, and communication skills
- Ability to work closely with engineering and product teams and influence secure development practices across the organization
Preferred Education and Experience:
- Bachelor s degree in Computer Science, Information Security, Engineering, or a related technical field; a Master s degree is a plus
- 3-6 years of experience in Application Security, Product Security, Security Engineering, or a related field
- Experience securing consumer-facing web, mobile, API, or large-scale digital products is preferred
- Experience working with fast-paced product engineering teams or media/OTT platforms is an added advantage
- Relevant security certifications such as OSCP, CEH, CSSLP, or equivalent are a plus
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
AutomationCI/CD Pipelinesapisapi securitycehencryptiondata protectionapplication architectureauditsDevsecopsdastdeploymentcloudCyber SecurityApplication SecurityCommunication SkillsArchitecturecompliance
Section · Company
About JioStar
JioStar
Media & Entertainment
3.6k+
employees
Mumbai
US
About
JioStar, the recently formed company with the merger of RILs Viacom18 and Star Disney, is the largest Media & Entertainment company in India with a combined valuation of over ~USD 8.5 Bn. The company operates over 100 television channels across iconic brands such as Star Plus, Colors, MTV etc. and has an aggregate subscription base of over 100 million on its streaming platform JioHotStar (formed by bringing together JioCinema and Disney+ Hotstar two of India’s leading platforms for premium sports, entertainment and lots more). .
Industries
Media & EntertainmentMedia & Entertainment / PublishingBroadcasting
Employee ratings
770 reviews
3.5/ 5
Culture
3.3
Career growth
2.6
Work-life
3.4
Employees rate it well for
Work Life Balance89Work Culture88Senior Management52Salary45Career Growth45
Find them on