Information Security Engineer

You’ll be our : Application Security Engineer

You’ll be based at : IBC Knowledge Park, Bengaluru

You’ll be aligned with : Information Security Manager

You’ll be joining our : Information Security team

What you’ll do at Ather

Security Assessment & Testing:

• Conduct comprehensive security assessments of web applications, mobile applications (iOS/Android), and APIs
•  Execute penetration testing and vulnerability assessments
• Identify and remediate OWASP Top 10 and SANS Top 25 vulnerabilities and other security flaws
• Review and analyze application architecture for security weaknesses

Vulnerability Management & Coordination:

•  Coordinate with development teams to explain identified vulnerabilities in detail
• Drive developers for timely closure of security findings
• Maintain detailed reports of open findings and track remediation progress
• Provide clear remediation guidance and technical support to development teams throughout the remediation process
• Track and monitor vulnerability remediation progress
• Escalate critical security issues to appropriate stakeholders

Security Architecture & Design:

•  Conduct threat modeling exercises for applications and systems
•  Design and implement secure coding standards and guidelines
• Review application designs and provide security recommendations
• Collaborate with development teams to integrate security into the SDLC

DevSecOps Implementation:

• Integrate security tools into CI/CD pipelines
• Implement and manage SAST, DAST, SCA, and container security scanning tools
• Automate security testing processes and vulnerability management
• Support shift-left security initiative
• Collaborate with engineering and development teams and drive the findings to closure