Bookmyshow Hiring For Information Security at Mumbai Full Time

Your Role:

BookMyShow is looking for a skilled information security analyst to be part of our InfoSec team. As
an information security analyst, you will be responsible for monitoring, fixing the security issues,
interacting with different teams regarding security issues, and documenting security incidents.

1.Conduct Vulnerability Assessments, Penetration Testing, and Source Code reviews.
Automate Technical tasks in CI/CD through use of APIs and applicable set of tools.
2.Perform Application source code security reviews for APIs, middleware, frontends in Java,
3.Exploit security flaws and vulnerabilities with attack simulations on multiple application
platforms like Web, iOS, Android and cloud platform.
4.Perform SAST & DAST and improve SDLC.
5.Develop solution architecture and blueprints based on business technology and security
objectives.
6.Research and maintain secure coding guidelines.
7.Perform Security Architecture and Low-Level Application Security Design review involving:
Data Protection, Authentication and Authorizations, Web Application Security and Network
Security.
8.Collaborate with product teams to build secure products and achieve cybersecurity.
9.Maintain active understanding of industry practices for secure software development and
incident response.
10.Manage WAF and applications pertaining to application layer protection

Your Checklist

1.Zealous to un-learn & re-learn cyber security practices in a Cloud Native- DevOps Only
environment.
2.3-5 years experience in Application Security, Penetration Testing, DevSecOps.
3.Excellent skills with few of the Application Security Testing tools such as: Burpsuite,
OWASP, ZAP, SQLMap, Kali, etc.
4.Able to work with cross functional teams like Site Reliability, Tech Support, etc.
5.Experience with scripting languages such as: Python, bash, PowerShell etc.
6.Knowledge of Kubernetes and Docker containers.
7.Knowledge of OWASP Top 10 and SANS Top 25.
8.Ability to balance & prioritize between strategic & tactical outcomes.
9.Ability to operate, decide & evolve in ambiguous situations.
10.Curiosity to learn & adopt emerging technologies.
11.Strong interpersonal skills as well as excellent written and verbal communication skills.
12.Self-motivated and individual contributor.