Key Responsibilities: Design and enforce security architecture across all environments (Dev, Stage, Prod, DR). Conduct regular VAPT (Vulnerability Assessment and Penetration Testing) and threat modeling. Define and monitor policies for encryption, identity access management (IAM), and secure coding. Implement real-time alerting and SIEM tools for system and app security. Work with developers to review code and dependencies for CVEs and OWASP vulnerabilities. Ensure tokenization, masking, and key management policies are in place. Assist in audits (internal, PCI-DSS, RBI, ISO) and maintain compliance documentation. Develop incident response plans and lead red/blue team exercises. Required Skills: 5+ years in application or infrastructure security roles. Deep understanding of PCI-DSS, ISO 27001, RBI cybersecurity norms. Experience with SIEM (e.g., Splunk, Wazuh), WAFs, firewalls, and intrusion detection tools. Familiarity with TLS certs, HSMs, secrets management, and secure APIs. Strong scripting skills (Python, Bash) for automating security checks. Previous experience in securing financial systems or payment gateways is a must.
Role & responsibilities Understand user needs and create wireframes, mockups, and prototypes. Design responsive UI layouts and ensure seamless user experiences. Conduct user research, analyze feedback, and implement design improvements. Develop and maintain design systems and style guides. Collaborate with developers to ensure accurate design implementation. Perform usability testing to validate design solutions. Stay updated on the latest UI/UX trends and best practices.