Lead Security Engineer

Enterprise clients outsource service desk, end-user support and data centre operations to us under multi-year contracts.

Corvane has an opening for a Lead Security Engineer. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. This role is fully remote within India. Flexible hours with a daily team call in the morning. We talk mostly in Slack and hop on quick calls when something needs discussing.

What you'll be doing

• Write secure coding guidelines and run developer training.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Assess third-party vendors and SaaS integrations for security risk.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Review code and pull requests for security issues.
• Run threat modelling sessions with engineering teams on new features and architecture changes.

Who you are

• 8+ years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Experience with SIEM, EDR or vulnerability management tools.

Preferred

• Contributions to security tools or published CVEs.
• Kubernetes and container security (Falco, OPA Gatekeeper)

Compensation and benefits

• Health insurance for you and your family.
• Provident fund.
• Paid leave.
• Internet reimbursement.
• Flexible hours.
• Meal coupons.
• Gratuity.

Please include your notice period and salary expectations.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Corvane Pvt Ltd.