Senior Security Engineer

Over 580 employees work across sales, engineering, consulting and the SOC. We operate security operations centres on three continents, so alerts are triaged by analysts on day shift wherever they arrive.

Job summary:

Mallardway is hiring for the Senior Security Engineer role to secure our cloud infrastructure and the applications that run on it. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote within India. The team meets in Chennai once a quarter, travel covered. A stable internet connection and a backup power option are required.

Responsibilities:

• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Triage bug bounty reports from HackerOne or Bugcrowd
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Respond to security incidents and lead the technical investigation
• Write secure coding guidelines and run developer training
• Own secrets management, key rotation and KMS policies
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Assess third-party vendors and SaaS integrations for security risk

Required qualifications:

• 5-7 years in security engineering, application security or a related engineering role
• Experience with SIEM, EDR or vulnerability management tools
• Ability to explain security issues to engineers without lecturing them
• Programming or scripting ability in Python, Go or similar
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Hands-on cloud security experience in AWS, Azure or GCP

Compensation and benefits:

• Health insurance for you and your family
• Provident fund
• Paid leave
• Gratuity
• Internet reimbursement
• Flexible hours

We look at every application, usually within a week.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Mallardway Pvt Ltd.