Senior Security Engineer - Security Architecture

Senior Security Engineer - Security Architecture

About the Role
The Security Architecture team is responsible for security products and services used by millions of users every day. The team conducts security design and code reviews on applications (web, mobile) and infrastructures (cloud, on-premise). The team works closely with the Product, Engineering, and Infrastructure teams throughout the Software Development Life Cycle.
As Security Engineering Lead, you will lead security initiatives on critical projects. You are required to review large and complex systems, identify security gaps and vulnerabilities, and propose adequate security controls. You are expected to solve difficult security challenges by balancing security and usability.

What You Will Do

• Perform security design on applications (web, mobile) and infrastructures (cloud, on-premise)
• Perform security code review (manual, automated) on applications and infrastructures
• Ensure applications and infrastructures are secure by design, follow secure design principles, and adopt secure coding practices
• Identify security gaps and vulnerabilities, and propose appropriate controls and remediations
• Propose solutions to wide-ranging security problems
• Raise security awareness among the Product, Engineering, and Infrastructure team by conducting security training, and having regular security discussions
• Bridge communication between the broader Information Security team with the Product, Engineering, and Infrastructure team

What You Will Need

• Bachelor’s degree in Computer Science, or a related field
• Minimum 3 years of experience in Software Engineering, preferably on web and mobile application
• Minimum 3 years of experience in Information Security, preferably in application and cloud security
• Good knowledge of common secure design principles and secure coding practices
• Good knowledge of common adversarial techniques, tactics, and procedures
• Ability to learn new things quickly and independently
• Ability to communicate effectively, preferably in English

About the Team
The Security Architecture is primarily responsible for ensuring the security controls are being considered by the Engineering teams right from the beginning of product/application development. This will help in reducing the attack surface and also significantly reduce the cost to mitigate any security issue that got detected during the later stages of application development. The security architecture team members will also get exposure to various technologies being used by the Engineering teams and develop necessary security standards/best practices. This will help the security architecture team members to be updated and relevant with various technologies.