1625 Owasp Jobs - Page 3

Job Title: Cybersecurity Intern (Paid) Company: Ziya Academy LLP Location: Muppathadam, Aluva, Kerala (On-site) About the Internship Are you interested in ethical hacking, network defense, and cybersecurity practices? Join Ziya Academy LLP as a Cybersecurity Intern and gain real-world experience identifying security vulnerabilities, defending systems, and using professional tools to protect digital assets. This internship is designed to equip you with practical skills and project experience to launch your career in cyber security. What You'll Learn Hands-on training with cyber security tools Real-time project exposure: vulnerability scans, network audits, and simulations Internship Certificate & Performance Letter upon completion Familiarity with tools like Wireshark , Nmap , Burp Suite , Metasploit , and Kali Linux Opportunity to grow into a full-time cybersecurity analyst or ethical hacker role Eligibility Students, freshers, or graduates in Computer Science, IT, or Cybersecurity fields Basic knowledge of networking , Linux , or information security Strong interest in ethical hacking and cyber defense Must be available to work on-site at our Aluva location Key Learning Areas Cybersecurity Fundamentals & Threat Models Networking, TCP/IP & Web Security (OWASP Top 10) Vulnerability Assessment & Reporting Basics of Ethical Hacking & Penetration Testing Firewalls, VPNs, IDS/IPS Cyber Laws & Risk Assessment Tools: Kali Linux, Wireshark, Metasploit, Burp Suite Internship Duration 3 to 6 Months (Duration based on candidate availability and performance) Stipend & Growth Path Monthly Stipend: ₹3,000 – ₹6,000 (performance-based) Initial pay : 5000/- Top performers may receive a full-time job offer: ₹10,000 – ₹25,000/month Work Schedule & Mode Timing: Day Shift Mode: On-site (Muppathadam, Aluva) Perks & Benefits Mentorship from experienced cybersecurity professionals Access to live case studies & real-world security simulations Resume and LinkedIn profile development Internship Certificate & Letter of Recommendation Opportunity for full-time placement upon successful completion How to Apply Call or WhatsApp: +91 73063 53515 Email: ziyaacademyedu@gmail.com Job Details Job Types: Internship, Fresher, Full-time (Post-internship opportunity) Expected Post-Internship Salary: ₹10,000 – ₹25,000/month Supplemental Pay Options: ✔ Performance Bonus ✔ Overtime Pay ✔ Commission Pay ✔ Quarterly / Yearly Bonus ✔ Shift Allowance Work Location: In person (Aluva, Kerala) Job Types: Full-time, Permanent, Fresher, Internship Pay: ₹8,000.00 - ₹30,000.00 per month Schedule: Day shift Morning shift Supplemental Pay: Commission pay Overtime pay Performance bonus Quarterly bonus Shift allowance Yearly bonus Work Location: In person

Job Title: Cybersecurity Intern (Paid) Company: Ziya Academy LLP Location: Muppathadam, Aluva, Kerala (On-site) About the Internship Are you interested in ethical hacking, network defense, and cybersecurity practices? Join Ziya Academy LLP as a Cybersecurity Intern and gain real-world experience identifying security vulnerabilities, defending systems, and using professional tools to protect digital assets. This internship is designed to equip you with practical skills and project experience to launch your career in cyber security. What You'll Learn Hands-on training with cyber security tools Real-time project exposure: vulnerability scans, network audits, and simulations Internship Certificate & Performance Letter upon completion Familiarity with tools like Wireshark , Nmap , Burp Suite , Metasploit , and Kali Linux Opportunity to grow into a full-time cybersecurity analyst or ethical hacker role Eligibility Students, freshers, or graduates in Computer Science, IT, or Cybersecurity fields Basic knowledge of networking , Linux , or information security Strong interest in ethical hacking and cyber defense Must be available to work on-site at our Aluva location Key Learning Areas Cybersecurity Fundamentals & Threat Models Networking, TCP/IP & Web Security (OWASP Top 10) Vulnerability Assessment & Reporting Basics of Ethical Hacking & Penetration Testing Firewalls, VPNs, IDS/IPS Cyber Laws & Risk Assessment Tools: Kali Linux, Wireshark, Metasploit, Burp Suite Internship Duration 3 to 6 Months (Duration based on candidate availability and performance) Stipend & Growth Path Monthly Stipend: ₹3,000 – ₹6,000 (performance-based) Initial pay : 5000/- Top performers may receive a full-time job offer: ₹10,000 – ₹25,000/month Work Schedule & Mode Timing: Day Shift Mode: On-site (Muppathadam, Aluva) Perks & Benefits Mentorship from experienced cybersecurity professionals Access to live case studies & real-world security simulations Resume and LinkedIn profile development Internship Certificate & Letter of Recommendation Opportunity for full-time placement upon successful completion How to Apply Call or WhatsApp: +91 73063 53515 Email: ziyaacademyedu@gmail.com Job Details Job Types: Internship, Fresher, Full-time (Post-internship opportunity) Expected Post-Internship Salary: ₹10,000 – ₹25,000/month Supplemental Pay Options: ✔ Performance Bonus ✔ Overtime Pay ✔ Commission Pay ✔ Quarterly / Yearly Bonus ✔ Shift Allowance Work Location: In person (Aluva, Kerala) Job Types: Full-time, Permanent, Fresher, Internship Pay: ₹8,000.00 - ₹30,000.00 per month Schedule: Day shift Morning shift Supplemental Pay: Commission pay Overtime pay Performance bonus Quarterly bonus Shift allowance Yearly bonus Work Location: In person

Job Title: Cybersecurity Intern (Paid) Company: Ziya Academy LLP Location: Muppathadam, Aluva, Kerala (On-site) About the Internship Are you interested in ethical hacking, network defense, and cybersecurity practices? Join Ziya Academy LLP as a Cybersecurity Intern and gain real-world experience identifying security vulnerabilities, defending systems, and using professional tools to protect digital assets. This internship is designed to equip you with practical skills and project experience to launch your career in cyber security. What You'll Learn Hands-on training with cyber security tools Real-time project exposure: vulnerability scans, network audits, and simulations Internship Certificate & Performance Letter upon completion Familiarity with tools like Wireshark , Nmap , Burp Suite , Metasploit , and Kali Linux Opportunity to grow into a full-time cybersecurity analyst or ethical hacker role Eligibility Students, freshers, or graduates in Computer Science, IT, or Cybersecurity fields Basic knowledge of networking , Linux , or information security Strong interest in ethical hacking and cyber defense Must be available to work on-site at our Aluva location Key Learning Areas Cybersecurity Fundamentals & Threat Models Networking, TCP/IP & Web Security (OWASP Top 10) Vulnerability Assessment & Reporting Basics of Ethical Hacking & Penetration Testing Firewalls, VPNs, IDS/IPS Cyber Laws & Risk Assessment Tools: Kali Linux, Wireshark, Metasploit, Burp Suite Internship Duration 3 to 6 Months (Duration based on candidate availability and performance) Stipend & Growth Path Monthly Stipend: ₹3,000 – ₹6,000 (performance-based) Initial pay : 5000/- Top performers may receive a full-time job offer: ₹10,000 – ₹25,000/month Work Schedule & Mode Timing: Day Shift Mode: On-site (Muppathadam, Aluva) Perks & Benefits Mentorship from experienced cybersecurity professionals Access to live case studies & real-world security simulations Resume and LinkedIn profile development Internship Certificate & Letter of Recommendation Opportunity for full-time placement upon successful completion How to Apply Call or WhatsApp: +91 73063 53515 Email: ziyaacademyedu@gmail.com Job Details Job Types: Internship, Fresher, Full-time (Post-internship opportunity) Expected Post-Internship Salary: ₹10,000 – ₹25,000/month Supplemental Pay Options: ✔ Performance Bonus ✔ Overtime Pay ✔ Commission Pay ✔ Quarterly / Yearly Bonus ✔ Shift Allowance Work Location: In person (Aluva, Kerala) Job Types: Full-time, Permanent, Fresher, Internship Pay: ₹8,000.00 - ₹30,000.00 per month Schedule: Day shift Morning shift Supplemental Pay: Commission pay Overtime pay Performance bonus Quarterly bonus Shift allowance Yearly bonus Work Location: In person

Job Title: Cybersecurity Intern (Paid) Company: Ziya Academy LLP Location: Muppathadam, Aluva, Kerala (On-site) About the Internship Are you interested in ethical hacking, network defense, and cybersecurity practices? Join Ziya Academy LLP as a Cybersecurity Intern and gain real-world experience identifying security vulnerabilities, defending systems, and using professional tools to protect digital assets. This internship is designed to equip you with practical skills and project experience to launch your career in cyber security. What You'll Learn Hands-on training with cyber security tools Real-time project exposure: vulnerability scans, network audits, and simulations Internship Certificate & Performance Letter upon completion Familiarity with tools like Wireshark , Nmap , Burp Suite , Metasploit , and Kali Linux Opportunity to grow into a full-time cybersecurity analyst or ethical hacker role Eligibility Students, freshers, or graduates in Computer Science, IT, or Cybersecurity fields Basic knowledge of networking , Linux , or information security Strong interest in ethical hacking and cyber defense Must be available to work on-site at our Aluva location Key Learning Areas Cybersecurity Fundamentals & Threat Models Networking, TCP/IP & Web Security (OWASP Top 10) Vulnerability Assessment & Reporting Basics of Ethical Hacking & Penetration Testing Firewalls, VPNs, IDS/IPS Cyber Laws & Risk Assessment Tools: Kali Linux, Wireshark, Metasploit, Burp Suite Internship Duration 3 to 6 Months (Duration based on candidate availability and performance) Stipend & Growth Path Monthly Stipend: ₹3,000 – ₹6,000 (performance-based) Initial pay : 5000/- Top performers may receive a full-time job offer: ₹10,000 – ₹25,000/month Work Schedule & Mode Timing: Day Shift Mode: On-site (Muppathadam, Aluva) Perks & Benefits Mentorship from experienced cybersecurity professionals Access to live case studies & real-world security simulations Resume and LinkedIn profile development Internship Certificate & Letter of Recommendation Opportunity for full-time placement upon successful completion How to Apply Call or WhatsApp: +91 73063 53515 Email: ziyaacademyedu@gmail.com Job Details Job Types: Internship, Fresher, Full-time (Post-internship opportunity) Expected Post-Internship Salary: ₹10,000 – ₹25,000/month Supplemental Pay Options: ✔ Performance Bonus ✔ Overtime Pay ✔ Commission Pay ✔ Quarterly / Yearly Bonus ✔ Shift Allowance Work Location: In person (Aluva, Kerala) Job Types: Full-time, Permanent, Fresher, Internship Pay: ₹8,000.00 - ₹30,000.00 per month Schedule: Day shift Morning shift Supplemental Pay: Commission pay Overtime pay Performance bonus Quarterly bonus Shift allowance Yearly bonus Work Location: In person

Job Title: Cybersecurity Intern (Paid) Company: Ziya Academy LLP Location: Muppathadam, Aluva, Kerala (On-site) About the Internship Are you interested in ethical hacking, network defense, and cybersecurity practices? Join Ziya Academy LLP as a Cybersecurity Intern and gain real-world experience identifying security vulnerabilities, defending systems, and using professional tools to protect digital assets. This internship is designed to equip you with practical skills and project experience to launch your career in cyber security. What You'll Learn Hands-on training with cyber security tools Real-time project exposure: vulnerability scans, network audits, and simulations Internship Certificate & Performance Letter upon completion Familiarity with tools like Wireshark , Nmap , Burp Suite , Metasploit , and Kali Linux Opportunity to grow into a full-time cybersecurity analyst or ethical hacker role Eligibility Students, freshers, or graduates in Computer Science, IT, or Cybersecurity fields Basic knowledge of networking , Linux , or information security Strong interest in ethical hacking and cyber defense Must be available to work on-site at our Aluva location Key Learning Areas Cybersecurity Fundamentals & Threat Models Networking, TCP/IP & Web Security (OWASP Top 10) Vulnerability Assessment & Reporting Basics of Ethical Hacking & Penetration Testing Firewalls, VPNs, IDS/IPS Cyber Laws & Risk Assessment Tools: Kali Linux, Wireshark, Metasploit, Burp Suite Internship Duration 3 to 6 Months (Duration based on candidate availability and performance) Stipend & Growth Path Monthly Stipend: ₹3,000 – ₹6,000 (performance-based) Initial pay : 5000/- Top performers may receive a full-time job offer: ₹10,000 – ₹25,000/month Work Schedule & Mode Timing: Day Shift Mode: On-site (Muppathadam, Aluva) Perks & Benefits Mentorship from experienced cybersecurity professionals Access to live case studies & real-world security simulations Resume and LinkedIn profile development Internship Certificate & Letter of Recommendation Opportunity for full-time placement upon successful completion How to Apply Call or WhatsApp: +91 73063 53515 Email: ziyaacademyedu@gmail.com Job Details Job Types: Internship, Fresher, Full-time (Post-internship opportunity) Expected Post-Internship Salary: ₹10,000 – ₹25,000/month Supplemental Pay Options: ✔ Performance Bonus ✔ Overtime Pay ✔ Commission Pay ✔ Quarterly / Yearly Bonus ✔ Shift Allowance Work Location: In person (Aluva, Kerala) Job Types: Full-time, Permanent, Fresher, Internship Pay: ₹8,000.00 - ₹30,000.00 per month Schedule: Day shift Morning shift Supplemental Pay: Commission pay Overtime pay Performance bonus Quarterly bonus Shift allowance Yearly bonus Work Location: In person

Job Title: Cybersecurity Intern (Paid) Company: Ziya Academy LLP Location: Muppathadam, Aluva, Kerala (On-site) About the Internship Are you interested in ethical hacking, network defense, and cybersecurity practices? Join Ziya Academy LLP as a Cybersecurity Intern and gain real-world experience identifying security vulnerabilities, defending systems, and using professional tools to protect digital assets. This internship is designed to equip you with practical skills and project experience to launch your career in cyber security. What You'll Learn Hands-on training with cyber security tools Real-time project exposure: vulnerability scans, network audits, and simulations Internship Certificate & Performance Letter upon completion Familiarity with tools like Wireshark , Nmap , Burp Suite , Metasploit , and Kali Linux Opportunity to grow into a full-time cybersecurity analyst or ethical hacker role Eligibility Students, freshers, or graduates in Computer Science, IT, or Cybersecurity fields Basic knowledge of networking , Linux , or information security Strong interest in ethical hacking and cyber defense Must be available to work on-site at our Aluva location Key Learning Areas Cybersecurity Fundamentals & Threat Models Networking, TCP/IP & Web Security (OWASP Top 10) Vulnerability Assessment & Reporting Basics of Ethical Hacking & Penetration Testing Firewalls, VPNs, IDS/IPS Cyber Laws & Risk Assessment Tools: Kali Linux, Wireshark, Metasploit, Burp Suite Internship Duration 3 to 6 Months (Duration based on candidate availability and performance) Stipend & Growth Path Monthly Stipend: ₹3,000 – ₹6,000 (performance-based) Initial pay : 5000/- Top performers may receive a full-time job offer: ₹10,000 – ₹25,000/month Work Schedule & Mode Timing: Day Shift Mode: On-site (Muppathadam, Aluva) Perks & Benefits Mentorship from experienced cybersecurity professionals Access to live case studies & real-world security simulations Resume and LinkedIn profile development Internship Certificate & Letter of Recommendation Opportunity for full-time placement upon successful completion How to Apply Call or WhatsApp: +91 73063 53515 Email: ziyaacademyedu@gmail.com Job Details Job Types: Internship, Fresher, Full-time (Post-internship opportunity) Expected Post-Internship Salary: ₹10,000 – ₹25,000/month Supplemental Pay Options: ✔ Performance Bonus ✔ Overtime Pay ✔ Commission Pay ✔ Quarterly / Yearly Bonus ✔ Shift Allowance Work Location: In person (Aluva, Kerala) Job Types: Full-time, Permanent, Fresher, Internship Pay: ₹8,000.00 - ₹30,000.00 per month Schedule: Day shift Morning shift Supplemental Pay: Commission pay Overtime pay Performance bonus Quarterly bonus Shift allowance Yearly bonus Work Location: In person

Job Summary IAM Architect Develop the overarching vision principles and architecture for the workload identity and access management system across all environments like Azure GCP hybrid on premises Responsibilities Define the types of workload identities e.g. Managed Identities Service Accounts SPIFFE identities their attributes and their lifecycle management processes. Design the framework and specific policies for controlling workload access to resources based on the principle of least privilege. Define and design secure methods for workloads to authenticate and communicate with each other. Design the integration points and processes for connecting the workload IAM system with Fords current IAM infrastructure e.g. Entra ID Drive the creation of the long-term workload IAM governance framework ensuring alignment with industry best practices and Fords policies. Serve as the subject matter expert on workload identity concepts technologies e.g. Entra Workload Identity SPIFFE-SPIRE and best practices. Assess and recommend appropriate workload identity features and tools available in Azure GCP and other relevant platforms. Design the system to meet relevant security and compliance requirements

If digital transformation, next generation technology and growth opportunities excite you, then join our Netcracker Technology team! Our culture and collaborative work environment are the keys to our success. Here you will work with the best-in-class global teams, earn a competitive salary and contribute to the largest digital transformations around the world. What’s in it for you? At Netcracker, we are all entrepreneurs. This means, we get creative when thinking of technical solutions, we explore possibilities and innovations and get excited about new technology. We take complete ownership of our roles and aren’t micromanaged or left feeling like just another number. The results we achieve are highly visible to our leadership team and we are recognized for our work and promoted accordingly. In addition to living out an entrepreneurial culture, you will also receive a wide range of outstanding benefits including health, accident and life insurance as well as paid time off, sick time, transportation and parental leave. What skills and experience will you need for this role? Technical background at Linux, Windows and\or networking. Excellent understanding of OWASP Risks, Vulnerabilities and Mitigation Mechanisms. Experience with Web Application Firewall management and rules. Experience with Regular Expressions. Network traffic and log analysis. Insider threat and advance persistent threat detection. Malware analysis and forensics. Differentiation of intrusion attempts from false positive alarms. Security incidents investigation, evidence gathering and expert witnessing. Understand and operate Security Information and Event Management (SIEM). Excellent communication skills, politeness. High level of English verbal/writing skills is a must. Preferred Skills Solid understanding of web applications, web servers, application firewalls, frameworks and protocols with respect to web application development, deployment, and operational Experience in exploiting web apps and web services security vulnerabilities including cross-site scripting, cross-site request forgery, SQL injection, DoS attacks, XML/SOAP, and API attacks. Knowledgeable in IT Security controls (AV, 2FA, Vulnerability management, DLP, etc.) Knowledgeable in IT Security processes, concepts and practices is highly desirable. Basic IT / IT Security related certification, such as CCNA, ITIL, CompTIA, CISSP will be an advantage Education & Certification University degree in Computer Science, Computer Engineering, Information Systems or similar Work Location: Bangalore Who is Netcracker Technology? We are a forward-looking software company, offering mission-critical solutions to service providers around the globe. Our comprehensive portfolio of software solutions and professional services enables large-scale digital transformations, unlocking the opportunities of the cloud, analytics, virtualization and 5G mobile networks. With an unbroken service delivery track record of more than 25 years, our unique combination of technology, people and expertise helps companies transform their networks and enable better experiences for their customers. Connect with us on LinkedIn and stay up to date on our company news Show more Show less

Job Description: Lead Security Engineer Location: Noida Sector 62 Working days: 6 days working Position Overview: We are looking for a 7 year plus highly skilled and experienced Lead Security Engineer to join our cybersecurity team. The ideal candidate will possess extensive knowledge in Vulnerability Assessment and Penetration Testing (VAPT), Threat Hunting, Red Teaming activities, and robust security practices. Responsibilities: Lead and mentor a dedicated team of security analysts and engineers, distributing tasks effectively, guiding their professional development, and managing their performance. Perform comprehensive security assessments including web application, API, network infrastructure, and mobile security testing. Conduct sophisticated Red Team engagements and realistic threat simulations to proactively identify and remediate vulnerabilities and security gaps. Execute thorough Threat Hunting activities to proactively identify hidden threats, vulnerabilities, or malicious activities within the organization's infrastructure. Carry out extensive system scans and manual assessments using security tools such as Burp Suite, Nmap, Metasploit, Wireshark, OWASP ZAP, Kali Linux, Nikto, and other specialized tools. Perform secure configuration reviews and compliance audits of servers, firewalls, and network devices against established security benchmarks such as CIS. Integrate cybersecurity practices within the Software Development Life Cycle (SDLC) including threat modelling, secure coding, and security code reviews. Collaborate effectively with internal teams and external auditors to provide security artifacts for compliance and regulatory requirements. Continuously assess and recommend innovative cybersecurity solutions to enhance organizational security posture. Qualifications: Bachelor’s degree in Information Technology, Computer Science, or a related field. At least 8-10 years of experience in cybersecurity, specifically in penetration testing, vulnerability assessments, threat hunting, and red teaming. Certifications such as Certified Ethical Hacker (CEH), CRT, or related cybersecurity certifications preferred. Strong expertise in tools like Burp Suite, OWASP ZAP, Nmap, Metasploit, Wireshark, and other relevant security tools. Demonstrable experience in performing OSINT (Open Source Intelligence) investigations and related methodologies. Experience managing security within diverse environments and knowledge of regulatory and compliance standards. Excellent analytical, problem-solving, communication, and teamwork skills. Strong commitment to continuous learning and staying updated on cybersecurity trends and threats. Personal Attributes: Strong leadership and mentorship capabilities. Proactive approach to security threats and vulnerabilities. Ability to communicate effectively with technical and non-technical stakeholders. High ethical standards and professionalism in managing sensitive information. Show more Show less

Bangalore, India or Chennai, India The Opportunity Anthology delivers education and technology solutions so that students can reach their full potential and learning institutions thrive. Our mission is to empower educators and institutions with meaningful innovation that’s simple and intelligent, inspiring student success and institutional growth. The Power of Together is built on having a diverse and inclusive workforce. We are committed to making diversity, inclusion, and belonging a foundational part of our hiring practices and who we are as a company. For more information about Anthology and our career opportunities, please visit www.anthology.com. Anthology's Security Program is dedicated to the engineering and operation of cutting-edge technologies that monitor and strengthen the confidentiality, integrity, and availability of all our information systems and products. We are building a high-performing team that fosters frictionless collaboration with partners across the organization, driven by transparency, trust, and teamwork. Our goal is to elevate Anthology’s security posture through strong partnerships and proactive engagement. As the Director of Application Security, you will report directly to the Chief Information Security Officer (CISO) and will be responsible for leading, coaching, and mentoring a dynamic team of security professionals. You will oversee the processes and technologies that empower our global development teams to meet Anthology's stringent security standards, ensuring alignment with our clients' objectives. Your leadership will be pivotal in driving a culture of collaboration and security across the organization. You will build and nurture relationships with key leaders and stakeholders within our product and technology teams, advising them on security control requirements, posture, and best practices. You will take ownership of driving a shift-left mindset, ensuring that security is embedded early in the development lifecycle. The ideal candidate will be a proven leader with a track record in program management, a strong understanding of application security, and a deep expertise in integrating security practices and tools into product development processes. Your ability to inspire, guide, and elevate your team, while ensuring seamless collaboration with cross-functional teams, will be critical to the success of our security strategy. The Candidate Required skills/qualifications: Strong leadership skills, including experience with project/program management, performance management, initiating and driving high-value process change and continuous improvement, and developing/mentoring teams Minimum of 7 years of prior relevant experience, with at least 2 years’ experience as a manager or director Experience operating security testing automation and continuous improvement processes with automated testing tools as integrated components of the SDLC to improve software quality across multiple information systems Working knowledge of common application security vulnerabilities, including those cataloged in the OWASP Top 10, SANS CWE Top 25, and implementing processes to prevent, detect, mitigate and remediate vulnerabilities as an ongoingprogram Ability to communicate security posture, risk, and mitigation strategies to technical and non-technical audiences, and act as an evangelist of security objectives to influence decision making at senior management levels in support of business risk management processes and complianceobjectives Experience in software engineering and/or product architecture roles, with a working knowledge of application securityarchitectures Experience managing improvement projects and communicating project riskseffectively Demonstrated ability to communicate and collaborate effectively with stakeholders at multiple levels across the organization Fluency in written and spoken English Minimum of bachelors’ degree in Computer Science or a related field Preferred Skills/qualifications Experience integrating and scaling security testing automation and continuous improvement cycles into the software development process, creating a collaborative and efficient culture across development, security and operations teams Experience managing a security program in a global organization Experience managing technology vendor relationships as an extension of the team and execution of planned projects on schedule and onbudget Familiarity with compliance standards and control catalogs such as ISO 27000 series, NIST 800-53, PCI DSS This job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities at any time. Anthology is an equal employment opportunity/affirmative action employer and considers qualified applicants for employment without regard to race, gender, age, color, religion, national origin, marital status, disability, sexual orientation, gender identity/expression, protected military/veteran status, or any other legally protected factor. Show more Show less

About the Role: We are looking for a technically sound and customer-focused Support Engineer to assist in deploying and troubleshooting our Web Application Firewall (SiteWALL) for our clients. The ideal candidate will have a strong understanding of web application infrastructure, DNS, HTTP/HTTPS protocols, SSL/TLS and basic cybersecurity concepts. You will play a critical role in ensuring successful deployment, configuration, and ongoing support of SiteWALL in various customer environments — from simple setups to complex, high-availability architectures. Key Responsibilities: Assist customers in deploying and configuring SiteWALL WAF across cloud and on-prem environments. Guide clients through DNS routing and traffic redirection to enable protection via SiteWALL. Troubleshoot web application connectivity, performance, or blocking issues post-WAF deployment. Collaborate with engineering and product teams to replicate, escalate, and resolve complex technical issues . Deliver training and onboarding sessions for customers and partners. Create and maintain deployment documentation, how-to guides , and solution articles and knowledge base. Provide support via email, phone, or remote sessions during business hours (or shifts, if applicable). Stay up-to-date with new features, releases, and threat trends relevant to SiteWALL. Requirements: Technical Skills: Solid understanding of DNS , CDN , and reverse proxy concepts. Experience with Linux command-line , nginx/apache , or similar systems. Knowledge of web protocols (HTTP, HTTPS, SSL/TLS) and web server behaviours. Hands-on experience with WAF, firewalls, load balancers , or cloud security tools is a strong plus. Understanding of common web vulnerabilities (OWASP Top 10) is preferred. Soft Skills: Strong problem-solving and troubleshooting skills . Ability to communicate technical concepts clearly to non-technical stakeholders. Customer-first mindset with the ability to remain calm under pressure. Good documentation and organizational skills. Preferred Qualifications: Bachelor’s degree in Computer Science, IT, or related field (or equivalent practical experience). Prior experience in support, cybersecurity , or web hosting technical support . Certifications like CEH , CompTIA Security+ , or AWS Certification are a bonus. What We Offer: Opportunity to work on a cutting-edge cybersecurity product. A collaborative and growth-oriented work environment. Training, certification support, and career growth opportunities. Job Type: Full-time Pay: ₹300,000.00 - ₹750,000.00 per year Shift: Day shift Evening shift Morning shift Work Days: Monday to Friday Work Location: In person

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com. Job Description Job Summary: Seeking a WAF Management and Governance Lead to oversee the security, operational integrity, and compliance of Web Application Firewall (WAF) systems. The ideal candidate will be responsible for ensuring robust protection against web-based threats, optimizing security policies, and governing WAF implementations across enterprise environments. WAF Administration : Lead the deployment, configuration, and ongoing management of Web Application Firewall solutions. Security Policy Development : Define, implement, and refine WAF rulesets to mitigate risks such as SQL injection, cross-site scripting (XSS), and other web threats. Governance & Compliance : Ensure WAF policies align with regulatory and industry security frameworks (e.g., OWASP, PCI-DSS, GDPR). Threat Monitoring & Mitigation : Collaborate with cybersecurity and internal teams to analyse threat patterns and adjust WAF settings for optimal protection. Performance Optimization : Evaluate WAF impact on application performance and optimize configurations without compromising security. Incident Response : Support investigation and response to security incidents related to web applications. Stakeholder Collaboration : Work with IT, security, and application development teams to integrate WAF security seamlessly. Reporting & Metrics : Establish key security performance indicators and provide regular governance reports. ͏ Experience : 9+ years in web security, including WAF deployment and governance. Technical Expertise : Hands-on experience with leading WAF platforms (e.g., AWS WAF, F5, Cloudflare WAF, Akamai Kona Security). Security Knowledge : Strong understanding of OWASP top 10 threats, secure coding practices, and web security protocols. Knowledge of DevSecOps practices and security automation. Compliance Awareness : Familiarity with regulatory requirements impacting web security governance. Communication : Ability to convey security risks and technical details to non-security stakeholders effectively. ͏ Certifications such as CISSP, CEH, CCSP, AWS Security Specialty or equivalent. Experience in DevSecOps, automation, and integrating WAF into CI/CD pipelines. Knowledge of cloud security architectures and API security governance. ͏ ͏ Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions. Applications from people with disabilities are explicitly welcome.

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com. Job Description Job Summary: Experienced Vulnerability Management and penetration testing Governance lead will manage a team to oversee the identification, assessment, and remediation of security vulnerabilities across enterprise systems. This role will focus on establishing a proactive security posture, ensuring compliance with industry standards, and driving governance initiatives to mitigate risks effectively along with strong leadership and project management skills. Vulnerability Assessment: Lead regular vulnerability scans and penetration testing across infrastructure, cloud environments and outside-In. Security Baseline: Lead development and implementation of Security Baseline using CIS Benchmarks by determining the systems, applications, and network devices to be secured (e.g., Windows, Linux, Cloud, Docker, Kubernetes). Risk Analysis & Prioritization: Evaluate identified vulnerabilities based on severity, exploitability, and potential business impact. Remediation Planning: Collaborate with IT, security, engineering and entity teams to ensure timely remediation of high-risk vulnerabilities. Governance & Compliance: Develop and enforce security governance frameworks in line with industry standards (e.g., NIST, CIS, ISO 27001, PCI-DSS). ͏ Threat Intelligence Integration : Leverage global threat intelligence feeds to stay ahead of emerging security threats and vulnerabilities. Security Policy Development: Define policies and best practices for vulnerability management, reporting, and remediation. Automation & Continuous Monitoring: Implement automated vulnerability scanning tools and ensure ongoing security assessments. Incident Response Support: Provide technical guidance in vulnerability-related security incidents and audits. Reporting & Metrics: Establish key risk indicators and provide executive reports on vulnerability trends and remediation progress. ͏ Experience: 12+ years in cybersecurity, vulnerability management, or Penetration testing roles. Technical Expertise: Hands-on experience with vulnerability scanning tools (e.g., Qualys, Tenable, Rapid7, Nessus, OpenVAS), penetration testing and threat intelligence platforms. Penetration Testing & Ethical Hacking : Experience with tools like Metasploit, Burp Suite, Nmap, and Wireshark for real-world security assessments. Security Framework Knowledge: Strong understanding of NIST, CIS benchmarks, OWASP Top 10, and CVSS scoring models. Compliance Awareness: Familiarity with regulatory standards affecting security risk management. Leadership & Communication: Ability to coordinate with multiple stakeholders, drive security improvements, and articulate risks effectively. Certifications such as CISSP, CISM, CEH, OSCP or equivalent. Experience in cloud vulnerability management (AWS, Azure, GCP). Knowledge of DevSecOps practices and security automation. ͏ ͏ Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions. Applications from people with disabilities are explicitly welcome.

Role: Linux Administrator Experience: 6+ Years Location: Chennai Mandatory: Linux, Unix, GCP, AWS JD: Experience: o 8+ years of experience in cloud security, with a focus on enterprise product software in the cloud. o At least 3+ years of hands-on experience with major cloud platforms (AWS, Microsoft Azure, or Google Cloud Platform). o Proven experience with securing enterprise software applications and cloud infrastructures. o Strong background in securing complex, large-scale software environments with a focus on infrastructure security, data security, and application security. o Hands-on experience with the OWASP Top 10 and integrating security measures into cloud applications. o Experience with Hybrid Cloud environments and securing workloads that span on-premises and public cloud platforms. Technical Skills: o In-depth experience with cloud service models (IaaS, PaaS, SaaS) and cloud security tools (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center). o Expertise in securing enterprise applications, including web services, APIs, and microservices deployed in the cloud. o Strong experience with network security, encryption techniques, IAM policies, security automation, and vulnerability management in cloud environments. o Familiarity with container security (Docker, Kubernetes) and serverless computing security. o Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, or similar tools. o Knowledge of regulatory compliance requirements such as SOC 2, GDPR, HIPAA, and how they apply to enterprise software hosted in the cloud. Show more Show less

Job Title: Tech Lead Location: Gurugram (On-site) Employment Type: Full-Time About Aaizel Tech Labs Aaizel Tech Labs is a cutting-edge tech startup specializing in cybersecurity, AI, geospatial solutions, and more. We are at the forefront of technological innovation, committed to developing breakthrough products and solutions that drive industry transformation. Join our dynamic team and work directly with our CTO, contributing to strategic technical decisions and solving complex challenges. Role Overview We are seeking an experienced Tech Lead with a minimum of 8+ years of industry experience. This role requires a deep understanding of multiple technical domains. The ideal candidate will possess in-depth expertise in at least 5-6 of the following areas: Software Development, Geospatial, Meteorology, Frontend, Backend, Embedded Systems, AI, ML, Generative AI, Cloud, System Architecture, Solution Architecture, DevOps, Cybersecurity, Blockchain, among others. You will serve as the right-hand expert to our CTO, helping troubleshoot complex technical problems, guide project teams, and drive innovation across the company. Key Responsibilities Technical Leadership & Collaboration CTO Support: Provide direct assistance to the CTO in evaluating, planning, and executing technology strategies. Cross-Domain Expertise: Leverage your multi-domain expertise to support diverse projects, ensuring technical excellence across teams. Project Guidance: Lead technical discussions, architecture reviews, and troubleshooting sessions across multiple technology stacks. Solution Architecture & System Design Design & Development: Contribute to designing robust, scalable solutions that integrate multiple technologies. Technical Roadmaps: Collaborate in developing and refining technical roadmaps and architecture blueprints. Technology Evaluation: Assess and recommend new technologies, frameworks, and best practices to improve product performance and security. Problem Solving & Innovation Issue Resolution: Diagnose and resolve critical technical issues across software development, cloud infrastructure, security, and other domains. Innovation Catalyst: Drive innovation by identifying opportunities for automation, process improvements, and technology enhancements. Mentorship: Mentor and guide technical teams, fostering a culture of continuous learning and high performance. Domain Expertise Integration Multi-Domain Strategy: Utilize your expertise in at least 5-6 domains (such as Software Development, Geospatial, Meteorology, AI/ML, Cloud, Cybersecurity, Blockchain, etc.) to support and optimize our solutions. Interdisciplinary Collaboration: Work closely with domain-specific teams to ensure integration and alignment of technical strategies across projects. Standards & Best Practices: Establish and enforce technical standards and best practices within your areas of expertise. Technical Stack Specificity Programming Languages Proficiency in at least 3-4 of the following languages: Python (Primary data science, AI/ML, backend development) JavaScript/TypeScript (Frontend and full-stack development) Java/Kotlin (Enterprise and Android development) C/C++ (Embedded systems and performance-critical applications) Go (Cloud-native and systems programming) Rust (Systems programming with high security) R (Statistical computing and geospatial analysis) Frameworks and Technologies Web Frameworks: React, Angular, or Vue.js Django, Flask, or FastAPI Node.js, Express.js Mobile Development: React Native Flutter Kotlin/Swift Cloud Platforms: AWS (Amazon Web Services) Google Cloud Platform Microsoft Azure Containerization and Orchestration: Docker Kubernetes Helm AI/ML Frameworks: TensorFlow PyTorch Keras scikit-learn Blockchain: Ethereum Hyperledger Fabric Solidity DevOps Tools: Jenkins GitLab CI/CD Terraform Ansible Cybersecurity Tools: Wireshark Metasploit OWASP ZAP Burp Suite Technology Vision Alignment Technology Roadmap Focus Areas Advanced AI and Machine Learning capabilities Enhanced Cybersecurity solutions Geospatial intelligence platforms Edge computing and IoT integration Blockchain and decentralized technologies Collaborative Innovation Model Regular technology forums and knowledge-sharing sessions Partnerships with academic institutions and research centers Open-source contributions and community engagement Internal hackathons and innovation challenges Required Skills & Qualifications Experience Minimum 8+ years of hands-on experience in technical leadership or advanced technical role. Educational Background Bachelor's or Master's degree in computer science, Engineering, or a related technical field. Domain Expertise Demonstrable expertise in at least 5-6 of the following areas: Software Development (Full-stack, Mobile, or Desktop) Geospatial Technologies Meteorological Systems Frontend/Backend Development Embedded Systems Artificial Intelligence, Machine Learning, Generative AI Cloud Computing & Infrastructure System Architecture & Solution Architecture DevOps & Automation Cybersecurity Blockchain Technologies Technical Skills Proficiency in multiple programming languages and frameworks. Strong understanding of system integration, microservices, and distributed architectures. Familiarity with cloud platforms (AWS, Azure, Google Cloud) and containerization (Docker, Kubernetes). Deep knowledge of security best practices and modern cybersecurity strategies. Problem-Solving Exceptional analytical and problem-solving skills, with the ability to manage complex technical challenges. Communication Excellent communication and leadership skills, with experience presenting technical concepts to both technical and non-technical stakeholders. Collaboration Proven ability to work in cross-functional teams and mentor junior technical staff. Preferred Skills Certifications Relevant certifications in cloud technologies, cybersecurity, or project management are a plus. Innovative Mindset A track record of contributing to or leading innovative projects that integrate emerging technologies. Agile Methodologies Familiarity with Agile and DevOps practices, with experience in continuous integration/continuous deployment (CI/CD). Strategic Thinking Ability to see the big picture while diving deep into technical details as needed. Why Join Aaizel Tech Labs? Direct Impact: Work closely with the CTO and senior leadership, playing a key role in shaping the company's technology strategy. Diverse Projects: Engage with a broad range of cutting-edge technologies across multiple domains. Growth & Innovation: Be part of an innovative startup where your expertise can directly influence product development and strategic decisions. Collaborative Culture: Join a vibrant team that values knowledge sharing, creativity, and continuous improvement. How to Apply If you are a seasoned technical expert ready to drive innovation and support our technology leadership, please send your resume, cover letter, and portfolio (if applicable) to hr@aaizeltech.com , bhavik@aaizletech.com or anju@aaizeltech.com. Show more Show less

Job Title: Cybersecurity Intern (Paid) Company: Ziya Academy LLP Location: Muppathadam, Aluva, Kerala (On-site) About the Internship Are you interested in ethical hacking, network defense, and cybersecurity practices? Join Ziya Academy LLP as a Cybersecurity Intern and gain real-world experience identifying security vulnerabilities, defending systems, and using professional tools to protect digital assets. This internship is designed to equip you with practical skills and project experience to launch your career in cyber security. What You'll Learn Hands-on training with cyber security tools Real-time project exposure: vulnerability scans, network audits, and simulations Internship Certificate & Performance Letter upon completion Familiarity with tools like Wireshark , Nmap , Burp Suite , Metasploit , and Kali Linux Opportunity to grow into a full-time cybersecurity analyst or ethical hacker role Eligibility Students, freshers, or graduates in Computer Science, IT, or Cybersecurity fields Basic knowledge of networking , Linux , or information security Strong interest in ethical hacking and cyber defense Must be available to work on-site at our Aluva location Key Learning Areas Cybersecurity Fundamentals & Threat Models Networking, TCP/IP & Web Security (OWASP Top 10) Vulnerability Assessment & Reporting Basics of Ethical Hacking & Penetration Testing Firewalls, VPNs, IDS/IPS Cyber Laws & Risk Assessment Tools: Kali Linux, Wireshark, Metasploit, Burp Suite Internship Duration 3 to 6 Months (Duration based on candidate availability and performance) Stipend & Growth Path Monthly Stipend: ₹3,000 – ₹6,000 (performance-based) Initial pay : 5000/- Top performers may receive a full-time job offer: ₹10,000 – ₹25,000/month Work Schedule & Mode Timing: Day Shift Mode: On-site (Muppathadam, Aluva) Perks & Benefits Mentorship from experienced cybersecurity professionals Access to live case studies & real-world security simulations Resume and LinkedIn profile development Internship Certificate & Letter of Recommendation Opportunity for full-time placement upon successful completion How to Apply Call or WhatsApp: +91 73063 53515 Email: ziyaacademyedu@gmail.com Job Details Job Types: Internship, Fresher, Full-time (Post-internship opportunity) Expected Post-Internship Salary: ₹10,000 – ₹25,000/month Supplemental Pay Options: ✔ Performance Bonus ✔ Overtime Pay ✔ Commission Pay ✔ Quarterly / Yearly Bonus ✔ Shift Allowance Work Location: In person (Aluva, Kerala) Job Types: Full-time, Permanent, Fresher, Internship Pay: ₹8,000.00 - ₹30,000.00 per month Schedule: Day shift Morning shift Supplemental Pay: Commission pay Overtime pay Performance bonus Quarterly bonus Shift allowance Yearly bonus Work Location: In person

Experience Overall – 8+ years of IT experience 7+ years of application security Experience 5+ years of Application Security testing Experience Must Have Skill : DAST/SAST/SCA Location : Bangalore/Hyderabad Type : Contract with Client Job Description Bachelor’s degree required. Deep familiarity with the OWASP Top 10 and other security concerns for web applications Deep Understanding of OWASP Application Security Verification Standards (ASVS) Deep understanding of SAST, DAST, SCA Scanning practices Experience in scanning leveraging Veracode, Appscan.or other enterprise tools. Understand how to interpret and assess CVEs (Common Vulnerability and Exposures) and CWEs (Common Weakness Enumeration) as found by scanning tools. Understanding of SAST, DAST tools and dependency scanning tools Experience working/integrating with secret management systems. Advanced knowledge of front-end and back-end web application development in at least one technology stack (.NET, Java, PHP, Ruby/Rails, Angular, Node.js, etc.) Track record of staying current with trends, techniques, tools, and processes that drive improvement of security posture of applications. Strong documentation skills Excellent verbal and written communication skills, with proven technical writing abilities (English language proficiency required) Team-oriented thinking with demonstrated ability to produce high-quality work as part of a fast-paced, dynamic team. Proven ability to communicate, collaborate, and present effectively with teams and individuals in different disciplines or areas. Technical Skills: SAST, DAST, SCA Roles and Responsibility Perform SAST/SCA/DAST scans using industry vulnerability scanner SAST/SCA – Veracode, using supplied compiled binary, configure scan platform to correct scan for both static code CWE’s as well as SCA derived CVEs. Work will include coordination with app owner to ensure all branches of code are included in compiled binary file. DAST – Work begins with crawling the target application to identify existing directory and file structure. Once identified, execute DAST scan using HCL product to identify dynamic issue only visible during code execution. Apply Now Click Here to Apply Apply for this position Full Name * Email * Phone * Cover Letter * Upload CV/Resume *Allowed Type(s): .pdf, .doc, .docx By using this form you agree with the storage and handling of your data by this website. * Show more Show less

As a startup, ChangingBox is looking for a Senior Flask Developer with real-world experience. This hybrid role is strictly Mumbai-based . We need a self-starter who writes clean, well-tested code – our product is client-facing, so code quality and reliability are paramount. What You’ll Do / Role Overview Experience: 3-4 years of hands-on development with Flask in a production environment (strong experience on live projects also considered). Flask & Python Proficiency: Solid understanding of the Flask framework and Python ecosystem. Able to build and consume RESTful APIs. Database & ORM: Experience with PostgreSQL and ORM libraries (e.g. SQLAlchemy); comfortable designing relational database models and queries. AWS Familiarity: Practical experience deploying and running applications on AWS cloud infrastructure (EC2, S3, RDS, etc.). Testing & QA: Demonstrated ability to write unit and integration tests (e.g. using PyTest) and follow best practices for QA. A track record of shipping well-tested, bug-resistant code is essential. Version Control: Proficient with Git and collaborative development workflows. Lead and mentor junior developers (as we scale). Own incident response, debugging, and root-cause analysis for production issues. Design systems with scale in mind (100+ concurrent users, flexible booking logic). Analyze bottlenecks and proactively optimize for performance, reliability, and cost. Education & Experience: 4+ years professional experience building web applications in Python (Flask required). Bachelor’s degree in Computer Science/Engineering or related field (preferred). Technical Skills: Expert-level proficiency with Flask, SQLAlchemy, PostgreSQL. Deep understanding of REST API design, ORM, and modern Python. Hands-on experience with AWS stack (EC2, S3, RDS), Docker, and Linux server management. Payment gateway integration experience is mandatory. Strong grasp of security fundamentals (authentication, authorization, OWASP). Proficiency in HTML, CSS, JavaScript basics (for API integration with frontend). Exposure to CI/CD pipelines (GitHub Actions, Jenkins, etc.). Familiarity with scalable systems design and cloud cost optimization. Soft Skills & Attitude: Start-up mindset: Ownership, hustle, self-initiative, and comfort with ambiguity. Excellent problem-solving, debugging, and communication skills. Willingness to mentor juniors and contribute to team culture. Ability to work directly with the CTO/founder and adapt to fast-changing priorities. Bonus Points: Experience with React.js or other modern front-end frameworks. Exposure to other marketplace platforms, multi-vendor workflows, or SaaS products. Prior experience in an early-stage startup environment. What we offer: Direct impact on business, technology, and product decisions. Work alongside founder and core team, with a high degree of autonomy. Stock options/equity for long-term value creation. Flexible work options. Opportunity to grow into a technology leadership or founding team role as we scale. A chance to solve real, high-impact problems in a market ripe for innovation. Show more Show less

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Exposure Assessment Lead, Vulnerability Discovery Today’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team helps protect the EY brand and build client trust. Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value. The opportunity As the Exposure Assessment Lead within Vulnerability Management, you revolutionize the way we identify and mitigate digital risks. This role will leverage deep technical expertise to manage the full lifecycle of vulnerability patching, create innovative solutions to complex security challenges, and develop risk-based metrics to enhance EY’s digital defenses. Automating vulnerability discovery and distilling intricate technical data into actionable insights will be key to safeguarding EY's digital assets against the latest threats. With your leadership, EY will not only maintain but also advance our position at the forefront of cybersecurity and vulnerability management. Your Key Responsibilities The Exposure Assessment Lead within Vulnerability Management will spearhead the evaluation and management of the firm's digital exposure, identifying and mitigating risks stemming from misconfigurations, vulnerabilities, and mismanaged assets. The candidate will play a crucial role in managing third-party risk assessments and identifying assets failing to meet stringent EY security standards. Collaborating closely with various departments, the lead will enhance digital risk management practices and develop comprehensive strategies to protect EY's digital assets. Additionally, you will monitor emerging threats in the digital landscape, advising on proactive measures to safeguard the firm against potential security breaches. Skills And Attributes For Success Strong written communication skills Analytical background Strategic planning experience Demonstrated ability to distil complex, technical data into clear, concise explanations Interest in developing creative solutions to complex issues Ability to handle high volume requests Collaborative mindset Efficient research methodologies To qualify for the role you must have A minimum of 8 years of experience in vulnerability management, red team, or purple team Strong understanding of cloud services, network security, and data protection principles Expert knowledge of offensive security principles Experience in automating vulnerability discovery An understanding and clear ability to develop performance metrics and risk-based assessment of digital exposure Excellent analytical and problem-solving skills, with the ability to translate complex technical issues into clear business impacts Demonstrated experience in managing third-party risk assessments and vendor relationships Exceptional communication and interpersonal skills Experience developing team and program performance metrics Leadership experience with the ability to manage and develop a high-performing team Ability to evaluate and prioritize competing priorities from varying stakeholders Ideally, you’ll also have OWASP training Incident response experience What We Look For We are looking for an experienced, creative leader that can operate independently and mentor junior team members to improve the organization’s ability to reduce the attack surface while enabling the business. The ideal candidate will seek to develop a comprehensive strategy to identifying and managing the risk of the firm’s digital footprint. What Working At EY Offers As part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial and social well-being. Your recruiter can talk to you about the benefits available in your country. Here’s a snapshot of what we offer: Continuous learning: You will develop the mindset and skills to navigate whatever comes next. Success as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way. Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs. Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Requisition Id : 1569844 As a global leader in assurance, tax, transaction and advisory services, we hire and develop the most passionate people in their field to help build a better working world. This starts with a culture that believes in giving you the training, opportunities and creative freedom. At EY, we don't just focus on who you are now, but who you can become. We believe that it’s your career and ‘It’s yours to build’ which means potential here is limitless and we'll provide you with motivating and fulfilling experiences throughout your career to help you on the path to becoming your best professional self. The opportunity : Manager-TMT-Assurance-ASU - TR - Technology Risk - Gurgaon TMT : Industry convergence offers TMT (Technology, Media & Entertainment, and Telecommunications) organizations the chance to evolve and transform, but it also presents challenges around competitiveness and delivering agile corporate strategies for growth. We help TMT companies create compelling employee and customer experiences, retaining skills and talent while achieving enterprise-wide operational excellence. We help them guard their data, brand and reputation. We also enable the pursuit of M&A strategies that methodically create value, reduce risk and transform TMT companies into powerhouses that will lead the technology revolution of the future – building a better working world for all. ASU - TR - Technology Risk : Assurance’s purpose is to inspire confidence and trust to enable a complex world to work. We do so by protecting and serving the public interest, promoting transparency, supporting investor confidence and economic growth and fostering talent to provide future business leaders. We help clients by: Ensuring their accounts comply with the requisite audit standards Providing a robust and clear perspective to audit committees and Providing critical information for stakeholders. Our Service Offerings include External Audit, Financial Accounting Advisory Services (FAAS), IFRS & US GAAP conversion, IPO and other public offering, Corporate Treasury - IFRS 9 accounting & implementation support etc. Your key responsibilities Technical Excellence Key skill sets required: Experience of working on IT Audits and advisory work such as FAIT, SOCR (SOC1, SOC2), SOX 404, ISO 27001, etc. Should have an understanding of what are the typical risks/challenges we encounter in these audits. Should have Understanding of Manage Change, Manage Access and Manage IT Operations Should have experience of working on ERP systems like SAP, Oracle etc so that they can conduct the IT audit on these systems Should be able to manage multiple clients independently at the same time and also provide regular status updates to both client and EY management. Ability to work on tight schedules and deadlines. Excellent written and verbal communication, interpersonal, networking, teaming and problem-solving skills. Initiative in keeping abreast of changing industry practices, analysis and design methods, tools and techniques and emerging technologies. Be highly flexible, adaptable, and creative. Willingness to work in different time-zones as required. Willingness to travel is an added benefit tentative countries of travel are Saudi, UAE, Bahrain. Skills and attributes To qualify for the role you must have Qualification To qualify for the role you must have: Sc. in Computers, B. Tech/ B.E. in Computers, BCA in Computers MCA in Computers, MS/ Sc. (Science) in Computers, M. Tech in Computers Charted Accountant with experience in handling technology risk related engagement Addon Skills & Certification: Beneficial if they have done CISA, CCSFP or any relevant certification Hands-on experience on SAP/ Oracle/ DevOps like environment Cyber Security Professional with hands on experience in implementing and reviewing cyber security security related solutions to identify and manage the cyber security risks (VA, PT, Secure configuration review, OWASP Top 10, IT Infrastructure Assessments, etc. Beneficial if have hands on experience on Generative AI related solutions in technology risk domain Experience Experience: 6+ years of experience of working on IT Audits and advisory work such as FAIT, SOCR (SOC1, SOC2), SOX 404, ISO 27001, etc. Should have experience of working and testing IT Application Controls and ITGCs and also understand how to prepare risk and control matrix’s. How to report issues/findings in an audit and ability to lead client meetings. Should have experience of drafting controls and report for Third-Party reporting, for example - SOC1/ SOC2 reports. Experience on HITRUST control testing will be an added advantage. Expectation is to manage the client and also the reporting manager vis a vis should have understanding of preparing Data Request Lists, Status Trackers etc. Determine that the work delivered is of high quality. Anticipate and identify engagement related risks and escalate issues as appropriate. Actively establish & strengthen client (functional heads & key influencers) and internal relationships. Big 4 Experience Preferred What we look for People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful and able to sustain postivie energy, while being adaptable and creative in their approach. What we offer With more than 200,000 clients, 300,000 people globally and 33,000 people in India, EY has become the strongest brand and the most attractive employer in our field, with market-leading growth over compete. Our people work side-by-side with market-leading entrepreneurs, game- changers, disruptors and visionaries. As an organisation, we are investing more time, technology and money, than ever before in skills and learning for our people. At EY, you will have a personalized Career Journey and also the chance to tap into the resources of our career frameworks to better know about your roles, skills and opportunities. EY is equally committed to being an inclusive employer and we strive to achieve the right balance for our people - enabling us to deliver excellent client service whilst allowing our people to build their career as well as focus on their wellbeing. If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible. Join us in building a better working world. Apply now. Show more Show less

Bangalore/ Gurgaon, India A security analyst role within the Global Technology Transversal Application Services (TAS) function, supporting the provision of a robust and consistent security scanning, remediation, and guidance service within the TAS Application Operations team. The team provides a global, centralized Operations, Governance, Audit, Risk & Security service across Application Delivery. What You’ll Be DOING What will your essential responsibilities include? Support the Application Operations (Security) team in all security related activities, forums and discussions. Perform application scanning across the Application Delivery estate using tools such as SonarQube, Checkmarx, JFrog Xray, CAST Highlight, Defender and Qualys. Assist in setting up Jenkins pipeline integration to CI/CD lifecycle. Perform Static Application Security Testing (SAST) and Software Composition Analysis (SCA), including analysis of components in applications to detect vulnerabilities and compliance issues. Work with Application Delivery teams to communicate the outcome of scanning and analysis, and agree remediation actions including target dates for completion, in alignment with Information Security Policy requirements. Assist in Risk Assessments, evaluating the severity of identified vulnerabilities and prioritizing remediation efforts based on potential impact to the organization. Assist in Policy development, contributing to the development and implementation of vulnerability management policies and procedures. Manage the production of reporting and metrics to both internal and external stakeholders. You will report to the Operations Lead. What You Will BRING We’re looking for someone who has these abilities and skills: Required Skills And Abilities Security First mindset. Understanding of vulnerability analysis, scanning and remediation processes. Understanding of CVEs, CVSS. Understanding of security industry compliancy benchmarks and standards i.e. CIS. Understanding of security best practices/standards i.e. OWASP, NIST. Preferable experience with at least 2 coding languages i.e. Java, .NET, C++, Python etc. Desired Skills And Abilities Outstanding analytical, critical thinking and organizational skills, ability to multitask and work to deadlines. Proficiency in Power BI, MS Work and MS Excel: We maintain and continually develop a number of Power BI Dashboards to support provision of critical data and use Excel to support our data capture and analysis and reporting. Excellent communication, interpersonal and relationship building skills (verbal and written) Who WE are AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks. For mid-sized companies, multinationals and even some inspirational individuals we don’t just provide re/insurance, we reinvent it. How? By combining a comprehensive and efficient capital platform, data-driven insights, leading technology, and the best talent in an agile and inclusive workspace, empowered to deliver top client service across all our lines of business − property, casualty, professional, financial lines and specialty. With an innovative and flexible approach to risk solutions, we partner with those who move the world forward. Learn more at axaxl.com What we OFFER Inclusion AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture and a diverse workforce enable business growth and are critical to our success. That’s why we have made a strategic commitment to attract, develop, advance and retain the most diverse workforce possible, and create an inclusive culture where everyone can bring their full selves to work and can reach their highest potential. It’s about helping one another — and our business — to move forward and succeed. Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe Robust support for Flexible Working Arrangements Enhanced family friendly leave benefits Named to the Diversity Best Practices Index Signatory to the UK Women in Finance Charter Learn more at axaxl.com/about-us/inclusion-and-diversity. AXA XL is an Equal Opportunity Employer. Total Rewards AXA XL’s Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do. We’re committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence. Sustainability At AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our 2023-26 Sustainability strategy, called “Roots of resilience”, focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations. Our Pillars Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society - are essential to our future. We’re committed to protecting and restoring nature - from mangrove forests to the bees in our backyard - by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans. Addressing climate change: The effects of a changing climate are far reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal-led solutions. Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We’re training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting. AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL’s “Hearts in Action” programs. These include our Matching Gifts program, Volunteering Leave, and our annual volunteering day - the Global Day of Giving. For more information, please see axaxl.com/sustainability. Show more Show less

Bangalore/ Gurgaon, India A security analyst role within the Global Technology Transversal Application Services (TAS) function, supporting the provision of a robust and consistent security scanning, remediation, and guidance service within the TAS Application Operations team. The team provides a global, centralized Operations, Governance, Audit, Risk & Security service across Application Delivery. What You’ll Be DOING What will your essential responsibilities include? Support the Application Operations (Security) team in all security related activities, forums and discussions. Perform application scanning across the Application Delivery estate using tools such as SonarQube, Checkmarx, JFrog Xray, CAST Highlight, Defender and Qualys. Assist in setting up Jenkins pipeline integration to CI/CD lifecycle. Perform Static Application Security Testing (SAST) and Software Composition Analysis (SCA), including analysis of components in applications to detect vulnerabilities and compliance issues. Work with Application Delivery teams to communicate the outcome of scanning and analysis, and agree remediation actions including target dates for completion, in alignment with Information Security Policy requirements. Assist in Risk Assessments, evaluating the severity of identified vulnerabilities and prioritizing remediation efforts based on potential impact to the organization. Assist in Policy development, contributing to the development and implementation of vulnerability management policies and procedures. Manage the production of reporting and metrics to both internal and external stakeholders. You will report to the Operations Lead. What You Will BRING We’re looking for someone who has these abilities and skills: Required Skills And Abilities Security First mindset. Understanding of vulnerability analysis, scanning and remediation processes. Understanding of CVEs, CVSS. Understanding of security industry compliancy benchmarks and standards i.e. CIS. Understanding of security best practices/standards i.e. OWASP, NIST. Preferable experience with at least 2 coding languages i.e. Java, .NET, C++, Python etc. Desired Skills And Abilities Outstanding analytical, critical thinking and organizational skills, ability to multitask and work to deadlines. Proficiency in Power BI, MS Work and MS Excel: We maintain and continually develop a number of Power BI Dashboards to support provision of critical data and use Excel to support our data capture and analysis and reporting. Excellent communication, interpersonal and relationship building skills (verbal and written) Who WE are AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks. For mid-sized companies, multinationals and even some inspirational individuals we don’t just provide re/insurance, we reinvent it. How? By combining a comprehensive and efficient capital platform, data-driven insights, leading technology, and the best talent in an agile and inclusive workspace, empowered to deliver top client service across all our lines of business − property, casualty, professional, financial lines and specialty. With an innovative and flexible approach to risk solutions, we partner with those who move the world forward. Learn more at axaxl.com What we OFFER Inclusion AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture and a diverse workforce enable business growth and are critical to our success. That’s why we have made a strategic commitment to attract, develop, advance and retain the most diverse workforce possible, and create an inclusive culture where everyone can bring their full selves to work and can reach their highest potential. It’s about helping one another — and our business — to move forward and succeed. Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe Robust support for Flexible Working Arrangements Enhanced family friendly leave benefits Named to the Diversity Best Practices Index Signatory to the UK Women in Finance Charter Learn more at axaxl.com/about-us/inclusion-and-diversity. AXA XL is an Equal Opportunity Employer. Total Rewards AXA XL’s Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do. We’re committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence. Sustainability At AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our 2023-26 Sustainability strategy, called “Roots of resilience”, focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations. Our Pillars Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society - are essential to our future. We’re committed to protecting and restoring nature - from mangrove forests to the bees in our backyard - by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans. Addressing climate change: The effects of a changing climate are far reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal-led solutions. Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We’re training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting. AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL’s “Hearts in Action” programs. These include our Matching Gifts program, Volunteering Leave, and our annual volunteering day - the Global Day of Giving. For more information, please see axaxl.com/sustainability. Show more Show less

At PwC, our people in managed services focus on a variety of outsourced solutions and support clients across numerous functions. These individuals help organisations streamline their operations, reduce costs, and improve efficiency by managing key processes and functions on their behalf. They are skilled in project management, technology, and process optimization to deliver high-quality services to clients. Those in managed service management and strategy at PwC will focus on transitioning and running services, along with managing delivery teams, programmes, commercials, performance and delivery risk. Your work will involve the process of continuous improvement and optimising of the managed services process, tools and services. Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn’t clear, you ask questions, and you use these moments as opportunities to grow. Skills Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: Respond effectively to the diverse perspectives, needs, and feelings of others. Use a broad range of tools, methodologies and techniques to generate new ideas and solve problems. Use critical thinking to break down complex concepts. Understand the broader objectives of your project or role and how your work fits into the overall strategy. Develop a deeper understanding of the business context and how it is changing. Use reflection to develop self awareness, enhance strengths and address development areas. Interpret data to inform insights and recommendations. Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements. Role Overview The C/C# Support Analyst is responsible for monitoring, troubleshooting, and optimizing C/C# applications, ensuring seamless operation, performance, and availability of enterprise applications. The role involves incident resolution, debugging, performance tuning, database optimization, API troubleshooting, and CI/CD support. The analyst will work in an Agile, DevOps-driven environment supporting legacy modernization, stabilization, enhancements, and performance improvements for mission-critical Freight, Rail, and Logistics applications. Required Technical Skills 🔹 Programming & Debugging: C, C++, C#, .NET Core, ASP.NET, WinForms, WPF 🔹 API & Database Support: REST, SOAP, SQL Server, PostgreSQL, Entity Framework, Dapper 🔹 Performance & Optimization: Profiling tools (PerfView, dotTrace, Visual Studio Profiler) 🔹 Server & Deployment: IIS, Apache, Nginx, Windows Services, Docker, Kubernetes 🔹 DevOps & CI/CD: Jenkins, Azure DevOps, GitHub Actions, Terraform, Ansible 🔹 Cloud & Monitoring: AWS, Azure, GCP, Splunk, ELK Stack, Dynatrace 🔹 Security & Compliance: OAuth2, JWT, SSL/TLS, SonarQube, Fortify, OWASP Key Responsibilities 1️ ⃣ Incident Management & Troubleshooting ✅ Provide Level 2/3 support for C and C# applications, resolving crashes, performance issues, and integration failures. ✅ Debug memory leaks, concurrency issues, deadlocks, and threading problems in C/C# applications. ✅ Investigate and resolve .NET Framework/.NET Core issues, DLL conflicts, and application dependencies. ✅ Use Windows Event Logs, Debugging Tools (WinDbg, GDB, Visual Studio Debugger), and Log Monitoring to identify root causes. ✅ Work with ITIL-based Change, Incident, and Problem Management processes (JIRA, ServiceNow, Remedy). 2️ ⃣ API & Database Support ✅ Troubleshoot RESTful APIs, Web Services, and SOAP APIs in ASP.NET Web API and .NET Core. ✅ Debug and optimize SQL queries, stored procedures, and indexing strategies in SQL Server, PostgreSQL, or Oracle. ✅ Work with Entity Framework (EF), ADO.NET, and Dapper ORM for efficient data handling. ✅ Fix authentication and session management issues (OAuth2, JWT, Active Directory, LDAP). 3️ ⃣ Performance Optimization & Memory Management ✅ Identify and resolve performance bottlenecks in C/C# applications using profiling tools like PerfView, Visual Studio Profiler, and dotTrace. ✅ Optimize garbage collection, memory allocation, and CPU utilization in .NET and C applications. ✅ Improve application startup time, response latency, and thread execution efficiency. ✅ Tune database queries, caching mechanisms (Redis, Memcached), and data serialization (JSON, XML, Protobuf). 4️ ⃣ Windows & Linux Server Support ✅ Deploy, monitor, and troubleshoot C/C# applications running on Windows and Linux environments. ✅ Work with IIS, Apache, or Nginx for application hosting and configuration. ✅ Manage Windows Services, background jobs, and scheduled tasks for batch processing. ✅ Handle containerized applications (Docker, Kubernetes, OpenShift) in cloud environments. 5️ ⃣ CI/CD & DevOps Support ✅ Support CI/CD pipelines for C# applications using Jenkins, Azure DevOps, GitHub Actions, GitLab CI/CD. ✅ Assist in automated builds and deployments using MSBuild, NuGet, and Octopus Deploy. ✅ Work on Infrastructure as Code (Terraform, Ansible) for cloud-based deployments. ✅ Manage version control and branching strategies using Git, Bitbucket, or TFS. 6️ ⃣ Security & Compliance ✅ Ensure C/C# applications comply with security standards (GDPR, HIPAA, SOC 2, ISO 27001). ✅ Monitor and mitigate vulnerabilities using SonarQube, Fortify, and Veracode. ✅ Implement SSL/TLS security measures, secure API calls, and role-based authentication. ✅ Protect applications against buffer overflow, SQL injection, and OWASP Top 10 security threats. 7️ ⃣ Cloud & Monitoring Support ✅ Monitor application logs and errors using Splunk, ELK Stack, Application Insights, or Dynatrace. ✅ Support cloud-hosted applications on AWS, Azure, or GCP using Lambda, Azure Functions, or Cloud Run. ✅ Work with Azure App Services, AWS Elastic Beanstalk, or Kubernetes for hosting .NET applications. ✅ Ensure application scalability and availability using load balancing and auto-scaling strategies. 8️ ⃣ Collaboration & Documentation ✅ Work in Agile (Scrum/Kanban) environments for continuous improvement and support. ✅ Maintain technical documentation, runbooks, SOPs, and knowledge bases. Show more Show less

Company Description It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today — ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone. Job Description Team Product Security is Shifting Everywhere and holistically improving the maturity of the security program. The Secure Software Development Lifecycle (SSDL) team helps the organization measure and improve security activities. The team leads product threat modeling, helps to improve security behaviors, and manages a highly visible security champions program. The team is both highly technical and strategic. Role As a Senior Product Security Engineer on the ServiceNow SSDL team, you will collaborate with developers and software architects on highly technical solutions and help the organization build secure and resilient software. You will be threat modeling software products and services to identify potential risk and participate in architectural reviews of products in development. A key part of this position is to ensure the continued success of a large and growing security champions program. You will help mentor security champions and assist them in secure software design. As a Senior Product Security Engineer, you will help security champions be successful. What You Get To Do In This Role Work on a wide range of technologies Work on complex architectural and technical challenges Participate in threat modeling activities Mentor and collaborate with development teams to adopt secure coding practices Work on strategic and highly visible security activities across the organization Be an advocate for security and participate in a security champions program Qualifications To be successful in this role you have: Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry. 4+ years of experience in software security (AppSec) 1+ years of experience in threat modeling software applications and services Proficient in threat modeling methodologies such as STRIDE or PASTA and their applied use in fast-moving, iterative development lifecycles In-depth knowledge of common web application vulnerabilities (OWASP Top 10) Developer-level proficiency in one or more languages - Python, Java, JavaScript, and Golang preferred Knowledge in authentication and authorization standards including OAuth, OIDC, SAML, JWT, and PASETO Knowledge of symmetric and asymmetric cryptography, digital signatures, PKI, TLS, and cryptographic hash functions Knowledge of cloud native technologies including containers, Kubernetes, and services provided by AWS, GCP, and Azure Knowledge of static analysis (SAST), dynamic analysis (DAST), and software composition analysis (SCA) security tools Knowledge of OWASP ASVS, SCVS, and related verification standards Ability to work collaboratively in a highly distributed team Ability to communicate technical concepts to business stakeholders A passion for security Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work. Learn more here. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2024 Fortune Media IP Limited. All rights reserved. Used under license. Show more Show less

Hyderabad, India, IND Description Candidates need to have 10 years experience, and 5 years in engineering software solutions using Java, Spring boot. Core Characteristics and Soft Skills: Beyond technical proficiency, the right mindset and interpersonal skills are crucial for success on our team. We’d prioritize candidates who demonstrate: Problem-Solving Acumen: The ability to analyze complex problems, break them down, evaluate different approaches, and implement robust, efficient solutions. This includes troubleshooting existing systems and designing new ones. Independence and Initiative: We value engineers who can take ownership of tasks, research potential solutions independently, make informed decisions, and drive work forward with minimal supervision once objectives are clear. Dependability and Accountability: Team members must be reliable, meet commitments, deliver high-quality work, and take responsibility for their contributions. Strong Communication Skills: Clear, concise communication (both written and verbal) is essential. This includes explaining technical concepts to varied audiences, actively listening, providing constructive feedback, and documenting work effectively. Collaboration and Teamwork: Ability to work effectively within a team structure, share knowledge, participate in code reviews, and contribute to a positive team dynamic. Adaptability and Eagerness to Learn: The technology landscape and business needs evolve. We seek individuals who are curious, adaptable, and willing to learn new technologies and methodologies. Core Technical Skillset: Our current technology stack forms the foundation of our work. Proficiency or strong experience in the following areas is highly desirable: Backend Development: Java: Deep understanding of Java (latest LTS versions preferred). Spring Boot: Extensive experience building applications and microservices using the Spring Boot framework and its ecosystem (e.g., Spring Data, Spring Security, Spring Cloud). Messaging Systems: Apache Kafka: Solid understanding of Kafka concepts (topics, producers, consumers, partitioning, brokers) and experience building event-driven systems. Containerization & Orchestration: Kubernetes: Practical experience deploying, managing, and troubleshooting applications on Kubernetes. OCP (OpenShift Container Platform): Experience specifically with OpenShift is a significant advantage. AKS (Azure Kubernetes Service): Experience with AKS is also highly relevant. (General Docker knowledge is expected) CI/CD & DevOps: GitHub Actions: Proven experience in creating, managing, and optimizing CI/CD pipelines using GitHub Actions for build, test, and deployment automation. Understanding of Git branching strategies and DevOps principles. Frontend Development: JavaScript: Strong proficiency in modern JavaScript (ES6+). React: Experience building user interfaces with the React library and its common patterns/ecosystem (e.g., state management, hooks). Database & Data Warehousing: Oracle: Experience with Oracle databases, including writing efficient SQL queries, understanding data modeling, and potentially PL/SQL. Snowflake: Experience with Snowflake cloud data warehouse, including data loading, querying (SQL), and understanding its architecture. Scripting: Python: Proficiency in Python for scripting, automation, data manipulation, or potentially backend API development (e.g., using Flask/Django, though Java/Spring is primary). Requirements Domain Understanding (Transportation & Logistics): While not strictly mandatory, candidates with experience or a demonstrated understanding of the transportation and logistics industry (e.g., supply chain management, freight operations, warehousing, fleet management, routing optimization, TMS systems) will be able to contribute more quickly and effectively. They can better grasp the business context and user needs. Additional Valuable Skills: We are also interested in candidates who may possess skills in related areas that complement our core activities: Data Science & Analytics: Experience with data analysis techniques. Knowledge of Machine Learning (ML) concepts and algorithms (particularly relevant for optimization, forecasting, anomaly detection in logistics). Proficiency with Python data science libraries (Pandas, NumPy, Scikit-learn). Experience with data visualization tools and techniques. Understanding of optimization algorithms (linear programming, vehicle routing problem algorithms, etc.). Cloud Platforms: Broader experience with cloud services (particularly Azure, but also AWS or GCP) beyond Kubernetes (e.g., managed databases, serverless functions, monitoring services). Testing: Strong experience with automated testing practices and tools (e.g., JUnit, Mockito, Cypress, Selenium, Postman/Newman). API Design & Management: Deep understanding of RESTful API design principles, API security (OAuth, JWT), and potentially experience with API gateways. Monitoring & Observability: Experience with tools like Prometheus, Grafana, ELK Stack (Elasticsearch, Logstash, Kibana), Datadog, Dynatrace, etc., for monitoring application health and performance. Security: Awareness and application of secure coding practices (e.g., OWASP Top 10).