Senior Security Engineer

Overview

Senior Security Engineer responsible for improving and operating application security controls across the SDLC within the Secure Build & Deploy team.

What you'll do

• Work with software engineering teams to ensure application security requirements are addressed throughout the SDLC.
• Develop secure coding resources, guidelines, and control documentation.
• Improve the design and operating effectiveness of Application Security controls.
• Embed application security tools into CI/CD pipelines and maintain DevSecOps automated security tooling capabilities.
• Use/operate SAST/DAST and other software security tools, then identify and triage false positives/negatives.
• Report application security initiative results to stakeholders across leadership, product, risk, and engineering.
• Liaise with Security Champions to increase adoption of secure coding practices and tooling.

What you'll need

• 8-12 years of experience in Security Engineering with secure software development expertise.
• Expert knowledge of application security and software security concepts/frameworks (e.g., OWASP, NIST SSDF).
• Experience with CI/CD and DevSecOps practices (essential).
• Security tooling experience (e.g., Snyk, GitHub Advanced Security) (desirable).
• Coding/programming experience (e.g., Python) (desirable).
• Strong written communication skills and a risk mindset with risk management principles.
• Bachelor’s or master’s degree in engineering in Computer Science/Information Technology.

Details

• Location: Bangalore - Manyata Tech Park Road.
• Role reports directly to the Secure Build & Deploy COE Team.