Security Engineer

Compensation :

6.5 - 12 LPA

Key responsibilities:

• Work on security assessment VAPT of different web/android applications from diverse sectors.
• Create and implement automation solutions to enhance security and reduce manual effort.
• Collaborate with best security professionals to ensure the protection of the organization&aposs information systems, data, and network infrastructure.
• Responsible for securing cloud infrastructure by designing, implementing, and monitoring security controls, ensuring compliance, and mitigating risks across cloud environments
• Triage vulnerability reports on bug bounty programs and take it to resolution within the defined SLAs.
• Develop and maintain security policies, procedures, and standards
• Perform application security reviews and threat modeling on mission-critical systems, & enterprise applications to find and address potential security risks.
• Work on staying up-to-date with the latest security threats and vulnerabilities, and recommend security improvements.
• Good communication skills to organize and lead security awareness training sessions.
• Real life social engineering simulation campaigns with the organizations.
• Bug Bounty experience is a must

What To Bring:

In-depth knowledge of security vulnerabilities not just limited to OWASP Top 10

Experience in doing security assessments on web applications, Android and iOS mobile applications in microservice architecture

Experience in using the security tools to carry out manual & automated security assessments

Experience working with common product flows like payment gateway integration, authentication etc.

Knowledge of how applications work end-to-end which may help in multiple scenarios.

Good knowledge & understanding of Python, Burp Suite, NMAP etc. is a must.

Passion for security, and a practical and balanced approach to security issues

Ability to visualize the root cause and deep dive

Curiosity in knowing how things work in different conditions

Independent, self-motivated and comfortable working in a fast-paced environment with teams ranging from product to engineering teams.

Exceptional interpersonal verbal and written skills in English.

Ability to document risks, security controls and evidence to ensure compliance

Who are we

Apni Sec aims to deliver a Security as a Service (SECaaS) offering with different solutions consolidated on a centralized dashboard (a one-stop-shop for all your security needs). With the fast evolving needs of the world and rapid development within an organization, it becomes harder for the teams to deliver their flagship offerings to clients both securely and seamlessly. Apni Sec team comprises best security researchers and certified white hat hackers to protect organizations' data from attackers by detecting, investigating, and responding to cyber-threat. The main motto for ApniSec is to work hand-in-glove with the business, to enable them to still deliver their digital ambition without compromising on the security of their product and also of their stakeholders. This ensures that the business can build a digital info system vested in innovation, security & trust.

Our Values

We are audacious in vision and action

We encourage honesty and open dialogue

We respect everyone and every point of view

We make objective and data-driven decisions

We believe trust and accountability go hand-in-hand

We invest in each other&aposs growth

We bring our A-game and nothing else

We take charge and get it done

Benefits Offered/Perks

• The glory. Almost too much responsibility and ownership of projects.
• Company Onsite / Fun Events.
• Work with skilled security researchers!