Senior Security Engineer - Product Security

Our bench is in the back of a strip-mall storefront, where we image laptops and swap failed drives. Started by a former school district network admin in 2020, the business has grown almost entirely through referrals.

The role

Our team is growing and we are hiring a Senior Security Engineer - Product Security. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. Remote position. Most of the team is in Mumbai, but nobody is required to come in. Most of our work is async, and meetings are kept short. We use Slack, Notion and Google Meet. Cameras on for team calls.

Duties

• Write secure coding guidelines and run developer training.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Automate security checks in CI/CD pipelines.
• Respond to security incidents and lead the technical investigation.
• Coordinate external penetration tests and track remediation.

About you

• 5+ years in security engineering, application security or a related engineering role.
• Experience with SIEM, EDR or vulnerability management tools.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Perks and benefits

• ESOPs.
• Internet reimbursement.
• Gratuity.
• Provident fund.
• Paid leave.
• Learning budget.
• Flexible hours.

The posting will close once we have a strong shortlist.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Mumbai Data Systems Pvt Ltd.