R&D Security Engineer

R&D SECURITY ENGINEER

We are currently looking to recruit R&D Security Engineer to be based at Nemetschek India, Hyderabad.

WHAT WE DO BEST

Nemetschek India Private Limited (formerly MCS Solutions Private Limited) is a global organization and with a legacy of over half a century. It is a public company listed on MDAX and TecDAX (Germany) stock exchanges. The Nemetschek Group is a forerunner of digital transformation in the AEC/O (Architecture, Engineering, Construction & Operations) industry and covers the entire life cycle of construction and infrastructure projects. With intelligent software solutions, we lead our customers into the future of digitalization. By using our solutions customers can plan, build, manage, and operate buildings and infrastructure projects. 

Responsibilities

The R&D Security Engineer Customer Relations acts as part of the Nemetschek Shared Security Service Center and is responsible for validation of as false positives by developers, engineers or IT administrators classified vulnerabilities, which have been identified by Security tools or other input sources like penetration tests.

• Check completeness of false positive classification and related documentation.

• Check feasibility of documented reason, which explains why the identified vulnerability is a false positive. • Perform deep dive analysis and validation of vulnerabilities, which have been classified as false positives.

• Explain your assessment results to developers, engineers or IT administrators.

• Work closely with senior engineers and cross-functional teams.

• Collaborate with Senior Security Manager. • Potentially other related topics. 

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or a related field (or equivalent work experience).
• At least 2 years of experience in cybersecurity, penetration testing, or ethical hacking, IT security, or a related field. • Development experiences in at least one language
• Good knowledge about vulnerabilities
• Basic understanding of networking, system architectures, and common security vulnerabilities (e.g., OWASP Top 10), vulnerability scoring systems and how to report and calculate those.
• Good collaboration and communications skills
• Structured working approach