SR SPECIALIST – INFORMATION SECURITY

Job Summary

The SR Specialist in Information Security will play a critical role in ensuring the security of software development processes and practices. This position is essential for implementing and governing secure development methodologies, contributing to the organization's overall security posture.

Responsibilities

• Design and implement secure software development lifecycle (Secure SDL) practices and methodologies.
• Develop and maintain end-to-end fully-automated CI/CD pipelines, ensuring security throughout the process.
• Conduct threat modeling, vulnerability assessments, and security testing to identify and mitigate risks.
• Automate processes using scripting languages such as Python, Groovy, and shell scripts to enhance efficiency.
• Ensure compliance with security standards such as PCI-DSS, GDPR, and ISO.
• Assess the security of web services (SOAP/REST) and provide recommendations for improvements.

Qualifications

• 9 to 12 years of experience in software development, design, and engineering practices.
• Extensive experience in DevSecOps and secure development lifecycle methodologies.
• Proficiency in scripting languages: Python, Groovy, Helm, shell scripts, and Perl.
• Strong knowledge of CI/CD pipelines, including tools like Jenkins and GitHub Actions.
• Familiarity with OWASP Top 10, SANS Top 25, CWE, and CVE/Mitre.
• Hands-on experience in security testing, security scans, and compliance assessments.
• Educational qualifications: Bachelor's degree in Computer Science, Information Technology, or a related field.

Preferred Skills

• Experience with container security, APIs, and microservices.
• Knowledge of security assessment tools and methodologies.

Experience

• 9 to 12 years of relevant experience in software development and information security.

Environment

• Work Type: Full-time
• Work Mode: In-office
• Job Location: Bangalore

Salary

• Estimated salary range: ₹3,400,000

Growth Opportunities

• Opportunities for career advancement within the organization as security practices evolve and expand.