Information Security - Technical Professional

Responsibilities:

• Application Security
• Perform comprehensive application security assessments, including Static Application Security Testing (SAST) Pen testing, Dynamic Application Security Testing (DAST), and API security testing across enterprise applications.
• Review and analyse source code to identify and remediate security vulnerabilities.
• Collaborate with development teams to integrate security best practices in the SDLC and provide secure coding guidance.
• Lead and support remediation efforts by providing actionable recommendations and retesting fixes.
• Conduct manual and automated web application and API penetration tests to uncover business logic and security flaws.
• Develop and maintain security testing checklists, processes, and internal documentation.
• Track and report vulnerabilities, ensuring timely closure in collaboration with development and product owners.
• Participate in threat modelling sessions and help teams prioritize risks based on severity and business impact.
• Stay current with emerging threats, vulnerabilities, attack vectors, and security technologies to proactively improve application security posture.
• Information Security Compliance:
• Ensure compliance with relevant security standards and regulations, including ISO 27001, NIST Standard regarding Devsecops
• Develop and maintain security documentation and procedures.
• Assist with external security audits and assessments.
• Stay up to date on the latest security threats and vulnerabilities.
• Other Duties:
• Provide security consulting and support to other teams.
• Evaluate and recommend new security technologies and solutions.
• Participate in security awareness training and initiatives.
• Understanding of Technology & Security Risk Management and Vendor Risk Management Framework
• undefined Technical Skills and Capabilities (Primary – Must Have): 2-3 years’ experience working in IT Security in multiple capacities.Hands-on experience with application security tools such as Burp Suite, IBM AppScan, Acunetix, HP WebInspect, NTOSpider, Postman, checkmarx and others.Strong expertise in manual and automated web application security testing and a deep understanding of OWASP Top 10 and business logic vulnerabilities.Solid experience testing RESTful and SOAP APIs, analyzing request/response flows, and validating secure implementation.Strong knowledge of secure coding principles, common attack vectors (OWASP, SANS Top 25, WASC), and mitigation techniques.Familiarity with CI/CD pipelines and integrating security testing into DevOps workflows (preferred).Proficiency in both Black Box and White Box testing methodologies. Certifications (Preferred):Certified Ethical Hacker (CEH), OSCP, eWPT, or equivalent security certifications are preferred.Certification like ISO 27001, CISM etc. would be an added advantage.
• Diverse Minds, Shared Ambition
• At Teciem, we believe that our strength comes from the diversity of our people. Different perspectives, backgrounds, and experiences fuel our innovation and help us build solutions that truly make a difference in the world of financial technology.
• We’re committed to creating a workplace where everyone feels respected, heard, and empowered to grow. Here, you can bring your whole self to work, contribute your unique ideas, and be part of a team driven by shared ambition.
• We welcome talent from all walks of life and encourage applications from individuals of all genders, races, ages, abilities, identities, and beliefs. Together, we’re shaping a culture where diversity isn’t just celebrated — it’s essential to our success.