Security Engineer II jobs in Bangalore at Lithium

We're looking for talented individuals who are smart, passionate, and who live and breathe security. If you thrive in a fast-paced, collaborative workplace, and like to be challenged and inspired and if you like to bring creative and thoughtful solutions to the table, we can accomplish a lot together.

Responsibilities

Implement and rollout security-in-depth concepts to ensure security is incorporated in all the different layers within our products and infrastructure.
Conduct static security code reviews using automated and manual techniques.
Conduct security scanning and testing on our hosting environment, web and mobile applications.
Work with engineering and infrastructure teams to prioritize and address security bug fixes, security feature implementations and various security enhancements.
Conduct security architecture design reviews and enhance security requirements related to new and existing software platforms, systems and features.
Conduct internal and external security assessments, audits, and penetration testing.
Create and maintain comprehensive internal documentation.
Assist with the development and delivery of security awareness and technology training.
Assist with compliance and customer security audits.

Requirements

Associate or bachelor's degree preferred (Computer Science or Technology preferred).
3+ years of professional experience in information security and web application security.
Experience with web application technologies (Java, JavaScript, Python, React JS, HTML, XML, JSON, REST, AJAX).
Deep understanding of OWASP Top 10 and SANS Top 25 application security errors.
Experience with static code reviews.
Experience with scripting languages such as Perl, PHP, Python, Ruby, Shell, etc.
Experience with commercial and/or open source security tools (ex: Qualys, Rapid7 VeraCode, Metasploit, Burp Suite, Wireshark, WAF, IDS/IPS, Firewall, etc. ).
Strong analytical and problem-solving skills.
Strong oral and written communication skills.
Security certifications such as CISSP, CISM, CEH, CCNA, etc.
Familiarity with web protocols and standards (TCP/IP, HTTP, SSL, DNS, etc. ).
Experience with audits and compliance (SOC2 ISO 27001 GDPR, HIPAA, PCI DSS, etc. )..