Information Security Engineer (Thick Client Testing / Harness / VAPT)

Overview

Lead penetration testing of applications and infrastructure and conduct security architecture reviews as part of the Cyber and Data Security team, reporting to the Director, Information Security Engineering.

What you'll do

• Conduct advanced penetration testing on applications and infrastructure leveraging AI to identify and mitigate risks
• Conduct security architecture reviews and provide strategic recommendations for complex systems
• Partner with engineering and operations teams to prioritise vulnerabilities for remediation
• Design and implement security automation to streamline repetitive tasks and improve efficiency
• Diagnose problems you can't reproduce locally, using telemetry and good instrumentation

What you'll need

• Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain
• 3-5 years of experience in manual security assessments using industry-leading tools for web applications, thick clients, and APIs
• Expertise in thick client penetration testing across Windows, Mac, Linux, Android, and iOS platforms
• Proven experience conducting security architecture reviews in network security and complex application environments
• Strong fundamental knowledge of security concepts, cryptography, Unix architecture, and networking
• Ability to read/debug C/C++, Java, or JavaScript and engineer custom testing harnesses to identify weaknesses

Nice to have

• Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
• Proven ability to validate findings and perform thorough root cause analysis
• Advanced scripting knowledge used to automate repetitive security tasks and research
• Experience or interest in emerging security research areas including Container, AI/ML, or Cloud security

Details

• Location: Bangalore, India
• Work mode: Hybrid