Looking - Manager- Security Engineering For Pune Location

About Us:

Headquartered in Mumbai, with offices in Gurgaon and Chennai, we are rapidly expanding our global footprint with operations now in the Middle East and United States. We are proudly backed by Bessemer Venture Partners (BVP), a globally renowned venture capital firm investing in transformative technology companies and Bajaj Finance, one of Indias leading financial institutions committed to driving innovation in digital security

Funding & Recognitions:

• Security Product Company of the Year 2023 by Data Security Council of India (DSCI)

• Cybersecurity Company of the Year 2023 by BWSECURITY

• Innovative Security Product of the Year 2023 by BWSECURITY

• DSCI Innovation Box Winner 2023

Role:

Experience:

Job Location:

Qualification:

Requirements:

• Proven experience in Mobile/Web application security testing, including both manual, automated techniques, VAPT, Secure Code Review.

• Strong understanding of mobile platform architecture, security mechanisms, and common vulnerabilities.

• Familiarity with mobile app development frameworks and languages (e.g., Swift, Kotlin, Java).

• Experience with security testing tools such as Burp Suite, OWASP ZAP, MobSF, etc.

• Excellent analytical and problem-solving skills.

• Effective communication skills with the ability to clearly articulate technical findings recommendations.

• Relevant certifications (e.g., OSCP, OSWE, CISSP, CEH) are a plus.

Key Responsibilities:

• Conduct comprehensive security assessments of mobile applications on various platforms (iOS, Android).

• Perform offensive mobile application assessments.

• Develop custom scripts and tools to assist in the testing process.

• Analyze test results, prepare detailed reports, and provide recommendations for remediation.

• Collaborate with development teams to integrate security best practices throughout the SDLC.

• Stay updated on the latest security threats, vulnerabilities, and industry best practices.

• Provide guidance and support to developers and other stakeholders on secure coding practices.

• Perform manual and automated security testing to identify vulnerabilities such as OWASP Top 10, authentication flaws, authorization issues, insecure data storage, etc