DataVisor•2h ago
Career Pages
Senior Security Engineer
Hyderabad, TS, IN
Full Time
Senior Level
N/A
N/A
N/A
Responsibilities
Qualifications & Requirements
Experience Level: Senior Level
Full Job Description
DataVisor is seeking a Senior Security Engineer with expertise in cloud environments to join our team in Hyderabad, India. This role involves protecting system boundaries, hardening computer systems and network services against attacks, and securing sensitive data. You will collaborate closely with engineering teams to ensure our products and environments adhere to industry security standards and best practices.
Responsibilities
- Engage with internal business teams to assess security risks and deliver secure solutions through threat modeling, code review, penetration testing, and enforcing the secure development lifecycle.
- Assist in the implementation and execution of the application security program with business and engineering teams.
- Provide guidance on security architecture for cloud computing products and services.
- Test web applications for common vulnerabilities such as input validation, broken access controls, session management, cross-site scripting, SQL injection, and web server configuration issues.
- Utilize Security Information and Event Management (SIEM) for real-time analysis of security alerts from our cloud infrastructure and applications.
- Actively participate in Incident Management, Change Management, Security Policy Management, and Security Incident Response.
- Perform secure code reviews and integrate security throughout all phases of the Software Development Lifecycle (SDLC).
- Conduct SAST, DAST, and internal penetration testing on applications and infrastructure.
- Lead SOC 2 and PCI Compliance programs.
Requirements
- Minimum of 3 years of industry experience with a proven track record in end-to-end audit preparation and compliance ownership for SOC 2, PCI, HIPAA, or ISO 27001.
- Minimum of 3 years of experience in an Application/Product security role.
- Proficiency in security best practices within AWS (EC2, S3, IAM, VPC, Route53) and other cloud providers.
- Skills in Security Compliance, Vulnerability Scanning, and managing Penetration Testing.
- Demonstrated experience with systems auditing and monitoring to ensure compliance with security policies and standards.
- Understanding of key security concepts including cryptography, authentication, authorization, security protocols, and security vulnerabilities as applied to web application security and cloud services.
- Deep technical understanding of common security vulnerabilities and risks, along with countermeasures and compensating controls.
- Experience with Intrusion Detection/Prevention Systems (IDS/IPS), firewalls, DDoS Prevention, and Web Application Firewalls (WAFs).
- Solid understanding of IP networking protocols: IPv4/6, TCP/UDP, DHCP, HTTPS, FTP, etc.
- Experience performing network/security maintenance tasks in cloud environments and highly available 24/7 data centers.
- Experience conducting security testing following OWASP guidelines.
- Must be located in India.
Benefits
- Flexible scheduling and competitive compensation.
Company
DataVisor
DataVisor is a global leader in AI-powered fraud and risk detection, offering a comprehensive SaaS platform designed to combat evolving fraud and money laundering activities in real time. Our patented...
Hyderabad, TS, IN
Posted on Career Pages