Lead Security Engineer

Overview

Lead security engineer responsible for identifying, testing, and mitigating security weaknesses across applications, networks, endpoints, and infrastructure. The role covers application security, vulnerability management, penetration testing, security tooling, and security improvement activities.

What you'll do

• Perform web, API, and internal application security assessments using OWASP methodologies.
• Conduct DAST, SAST, and manual secure code reviews.
• Scan, analyze, validate, prioritize, and report vulnerabilities using Tenable and related tools.
• Provide remediation guidance and track vulnerability closure with technical teams.
• Design and execute penetration testing for applications, networks, cloud, and infrastructure.
• Develop scripts and security tools for testing, automation, and validation.
• Research threats and support threat, malware, and security improvement activities.

What you'll need

• Bachelor’s or master’s degree in computer science or related on-field experience.
• Experience with application security assessment tools including Burp Suite and OWASP ZAP.
• Hands-on experience with vulnerability assessment and penetration testing.
• Experience with Tenable, nmap, and Metasploit.
• Proficiency in Python, Bash, PowerShell, or similar scripting or programming languages.
• Understanding of network, application, endpoint, and infrastructure security.
• Ability to document findings and communicate risks to technical and non-technical stakeholders.

Nice to have

• Threat intelligence, malware analysis, or reverse engineering experience.
• Basic to intermediate threat and malware analysis experience.

Details

• Location: Bangalore, India.
• Position level: Senior Associate.