Senior Information Security Engineer - Hyderabad

Experience: 6 - 10 Years

Only Hyderabad candidates need to apply for this opportunity

About the Role

We are seeking a skilled Information Security Engineer to join our team and play a crucial role in securing our digital assets. This role offers an exciting opportunity to work with cutting-edge security tools, collaborate with global teams, and contribute to strengthening our cybersecurity framework.

Key Responsibilities

• Conduct vulnerability scans , analyze results, and support remediation efforts.
• Manage security incidents , including response, resolution, and prevention.
• Proactively protect digital assets , mitigating risks before breaches occur.
• Implement, configure, and upgrade security tools and systems .
• Evaluate, integrate, and configure security technologies to enhance protection.
• Collaborate with technical teams, product managers, and third-party vendors on security initiatives.
• Respond to cybersecurity alerts , monitor logs, and manage security events.
• Perform technical risk assessments on software, tools, and third-party integrations.
• Identify vulnerabilities in infrastructure and provide risk-based recommendations.

What Were Looking For

• 3+ years of experience in software development or security engineering .
• 3+ years of experience in DevOps and security operations .
• 3+ years handling incident response and escalation .
• Strong understanding of vulnerability management and scanning tools .
• Familiarity with common security frameworks, protection methods, and DevSecOps .
• Knowledge of cloud and infrastructure security principles.

Bonus Skills (Good to Have)

• Knowledge of web application security (e.g., OWASP Top 10 ).
• Understanding of security architecture principles .
• Experience with SAST, DAST, SCA , or related security testing tools.
• Familiarity with threat modeling frameworks and security assessments.
• Hands-on experience conducting security reviews (architecture, source code, infrastructure).
• Experience deploying automated/custom vulnerability scans .