Product Security Engineer, II
Groww
Bengaluru, Karnataka, India2h agovia LinkedIn
About the Role
- Assess applications and products for security vulnerabilities and design flaws.
- Interact with project teams to understand security requirements.
Key Responsibilities
- Perform Web application security testing.
- Perform Mobile (Android/iOS) application security testing.
- Conduct Secure code review.
- Conduct Product Requirement reviews.
- Perform Threat modelling.
- Conduct Static Code Reviews.
- Perform cloud security assessments.
- Evaluate security vulnerabilities.
- Think out of the box in building attack scenarios.
- Prioritize remediation efforts.
- Evaluate and improve application security tools and processes.
- Research latest security best practices.
- Stay current on new vulnerabilities and threats.
Requirements & Tech Stack
- Proficient in OWASP Top 10/SANS TOP 25.
- Proficient in PRD Review.
- Proficient in Threat Modelling.
- Proficient in Red Teaming.
- Proficient in Source Code review.
- Inclination towards learning multiple areas of security and building competency to deliver a wide spectrum of security.
- Competency in areas such as Cloud security, devSecOps, Data security.
- Ability to understand technology deeply.
- Ability to work with respective tech teams to define functional security design and best practices framework for security.
- A sharp focus on automating repeatable tasks.
- Ability to reduce operational overheads.
- Excellent communication skills to proactively communicate with stakeholders to keep them up to speed on any issues.
Qualifications
- Contributions to open source projects, GSoC etc is a plus.
- Certifications are not mandatory but skills are.