Information Security Engineer

Job Details

Location

• Bangalore Department: Information Security Group (ISG) Role: Consultant – DevSecOps & Validation Experience: 2-5 Years Employment Type: Full-Time

About the Role

Key Responsibilities

• Implement and drive Secure SDLC and DevSecOps practices across the organization.
• Build, review, and troubleshoot CI/CD pipelines using Jenkins, GitHub Actions, GitLab, and Azure DevOps.
• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web, mobile, API, cloud, and AI applications.
• Integrate and manage security tools such as SAST, DAST, SCA, container scanning, and secret scanning.
• Monitor organizational vulnerability posture and coordinate remediation with stakeholders.
• Conduct security gap assessments and recommend security improvements.
• Review security exceptions and ensure compliance with organizational security standards.
• Stay updated on emerging cyber threats, vulnerabilities, and security best practices.

Required Skills

• 2-5 years of experience in Information Security, DevSecOps, or Application Security.
• Strong understanding of: OWASP Top 10 CVE/CVSS OWASP ASVS SANS Top 25 MITRE ATT&CK Framework Cyber Kill Chain
• OWASP Top 10
• CVE/CVSS
• OWASP ASVS
• SANS Top 25
• MITRE ATT&CK Framework
• Cyber Kill Chain
• Hands-on experience with: SAST, DAST, SCA, IAST Container Security & Vulnerability Management CI/CD Security
• SAST, DAST, SCA, IAST
• Container Security & Vulnerability Management
• CI/CD Security
• Experience with security tools such as: Qualys, Rapid7, Checkmarx, Veracode Snyk, Black Duck, Trivy, Semgrep OWASP ZAP, Burp Suite, GitGuardian Nessus, Nmap, Wireshark, Metasploit, Kali Linux
• Qualys, Rapid7, Checkmarx, Veracode
• Snyk, Black Duck, Trivy, Semgrep
• OWASP ZAP, Burp Suite, GitGuardian
• Nessus, Nmap, Wireshark, Metasploit, Kali Linux
• Scripting and automation knowledge in: Python Shell Scripting PowerShell JavaScript SQL
• Python
• Shell Scripting
• PowerShell
• JavaScript
• SQL

Preferred Qualifications

• Engineering degree in Computer Science, Information Technology, Cyber Security, or related field.
• Relevant certifications such as: OSCP CEH eJPT Security+
• OSCP
• CEH
• eJPT
• Security+

Key Competencies