Principal Security Engineer

5 - 10 years

7 - 12 Lacs

Posted:None| Platform: Naukri logo

Apply

Work Mode

Work from Office

Job Type

Full Time

Job Description

About the role

As a member of Ethos Trust and Safety team, youll be responsible for building various security services and performing technical security risk assessments to support the Ethos main product. Youll help architect and build our internal security standards and frameworks. This role will help build and deploy various security controls in line with foundational security principles like least privilege, defence in depth, segregation of duties and zero-trust architecture.

Duties and Responsibilities:

  • Design, develop, and deploy security mechanisms to protect against adversarial attacks, data breaches, and other security vulnerabilities
  • Design and build robust threat detection, monitoring, investigation workflows response architectures and the components of the security analytics platform
  • Monitor and evaluate operational/security alerts
  • Conduct Threat Modeling, Design Reviews and Security Testing
  • Communicate risks to engineering staff through training and technical demonstration of vulnerabilities and secure design patterns
  • Partner with the DevOps team to orchestrate/automate security controls in the Ethos infrastructure/platform
  • Lead the vulnerability management lifecycle at the infrastructure, platform, and application levels
  • Participate in investigations, threat hunting, and incident response activities; build playbooks for specific incident response scenarios
  • Assist with compliance activities, such as SOC2 control implementation and testing, vendor risk assessments, etc.

Qualifications and Skills:

  • 5+ years of full time core, relevant InfoSec experience
  • Intimate familiarity with AWS cloud security, experience automating security processes in cloud environments
  • Proficiency in threat modelling, design reviews and security testing of various types of applications, technologies and platforms
  • Hands-on experience with CI/CD and DevOps tools
  • Ability to write automation scripts, ideally in more than one language
  • Experience in vulnerability/threat management activities at the infrastructure, platform, and application level
  • Experience with penetration tests/red team exercises, ideally the type that involve manual verification, exploitation, lateral movement, etc.
  • Expertise with event management/SIEM solutions, data modelling associated with building event detection and alerting capabilities
  • Able to come into our San Francisco, CA office once a week
#LI-Hybrid #LI-JA1

Mock Interview

Practice Video Interview with JobPe AI

Start Job-Specific Interview
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

coding practice

Enhance Your Skills

Practice coding challenges to boost your skills

Start Practicing Now

RecommendedJobs for You

Kolkata, Mumbai, New Delhi, Hyderabad, Pune, Chennai, Bengaluru

Kolkata, Mumbai, New Delhi, Hyderabad, Pune, Chennai, Bengaluru

Thiruvananthapuram, Kerala, India