Security Engineer - Bengaluru, India - Flipkart

Description

About the role:

The role of the Application Security engineer is to perform activities related to security andprivacy by design in the application developed by Flipkart and integrate security controlsthroughout SDLC life cycle.

The job holder is responsible for establishing, implementing,monitoring, reviewing and improving a suitable set of controls for the prevention of threats tothe security of our applications and information assets, ensuring the business objectives ofthe organization.

Roles & Responsibilites:

• The candidate should have 3 to 5 years of experience in web application and mobileapplication security vulnerability assessment and penetration testing.
• Conduct Penetration testing for thin & thick client based applications.
• Exploit securityflaws and vulnerabilities with attack simulations on multiple applications in Android andIOS platform.
• Develop PoC/exploits for vulnerabilities identified.
• Perform application security testing of Web, Mobile (Android and iOS), and API etc.
• Preparation of the final test report.
• Interaction and communication with developers for POC and support in mitigation ofvulnerability.
• Security Code review for in-house applications
• Provide remediation guidance to identified vulnerabilities.

Solve complex vulnerabilities such as business logic flaws and articulate to bothtechnical and non-technical partners.
Job Requirements:

• Good communication and presentation skills.
• Able to take the initiative. Positive 'can do' attitude and a determination to succeed
• Development experience in one or more of the technologies; Python, Node/JavaScript,Java, GoLang, PHP
• Experience with Red team exercises, threat hunting, OSINT.
• Experience in Threat Modelling.
• Experience in building security tools.
• Strong understanding of OWASP Top 10

The candidate should be a team player with good interpersonal skills and should beable to work independently with minimum supervision in a complex Infrastructure