Senior Security Engineer

Hashira is seeking a Senior Security Engineer to join our Hyderabad/Secunderabad team. This role is pivotal in safeguarding our digital assets, infrastructure, and applications by addressing both Web3 and Web2 security paradigms. You will leverage your knowledge of Amazon Web Services (AWS) and proficiency in monitoring and alerting systems to ensure robust security. Responsibilities include performing penetration testing on Web, Mobile, and Web3 assets (Smart Contracts, Bitcoin Script), planning and executing red team exercises, and managing bug bounty programs. You will continuously research new attack vectors, manage the attack surface based on risk assessment, and develop tools and methodologies to enhance overall security posture. Additionally, you will manage passive and active monitoring systems (Prometheus, Grafana, Wazuh), apply AWS security best practices, deploy and manage security tools, and communicate vulnerability reports effectively. Collaboration with cross-functional teams for remediation prioritization and adherence to ethical standards are key. A Bachelor's degree in Computer Science or a related field, foundational understanding of blockchain security, at least 1 year of security engineering experience, proficiency in monitoring tools, strong application/infrastructure/networking architecture knowledge, and familiarity with OWASP, SANS, NIST, and MITRE ATT&CK are essential. Experience with languages like Go, Rust, TypeScript, and Python, as well as AWS services and cloud security concepts, is required. Preferred qualifications include 3+ years of experience, experience triaging public bug bounties, publishing security content, working with distributed systems, and strong CTF recognition.