Security Engineer - VAPT

<p><p>The Security Engineer will be responsible for ensuring the security and integrity of our applications and cloud infrastructure.<br/><br/> The role requires hands-on experience in information security, with a focus on application security and/or cloud Responsibilities : </b></p><p><br/></p>- Conduct security reviews (static/dynamic analysis) of application code and designs throughout the SDLC.<br/><br/></p><p>- Perform penetration testing and vulnerability assessments of web and mobile applications.<br/><br/></p><p>- Work with development teams to remediate identified security vulnerabilities and implement secure coding best practices.<br/><br/></p><p>- Design, implement, and enforce security controls within our cloud environments.<br/><br/></p><p>- Assist in security audits, compliance assessments, and risk management activities.<br/><br/></p><p>- Participate in security incident response activities as : </b></p><p><br/></p>- 3-7 years of hands-on experience in information security, with a focus on application security and/or cloud security.<br/><br/></p><p>- Familiarity with common web application vulnerabilities (OWASP Top 10) and mitigation techniques.<br/><br/></p><p>- Experience with SAST/DAST tools.<br/><br/></p><p>- Understanding of secure coding principles in at least one programming language.<br/><br/></p><p>- Hands-on experience securing resources on at least one major cloud platform.<br/><br/></p><p>- Knowledge of cloud security services and data encryption in cloud environments.<br/><br/></p><p>- Strong understanding of fundamental security concepts.<br/><br/></p><p>- Excellent analytical and problem-solving skills.<br/><br/></p><p>- Strong verbal and written communication : </b></p><p><br/></p>- Relevant security certifications.<br/><br/></p><p>- Experience with DevSecOps practices and integrating security into CI/CD pipelines.<br/><br/></p><p>- Knowledge of container security and familiarity with compliance frameworks</p><br/></p> (ref:hirist.tech)