BookMyShow Looking for Software Development Engineer (IT Security) at Mumbai, Maharashtra Full Time

Ever wondered what it’s like to work at a 1000+ employee company that functions with the same excitement and drive as a 3 person startup? BookMyShow is evolving, and we are inviting passionate engineers to join us in transforming our products for the next generation of internet users

We at BookMyShow, we are looking for passionate individuals who are self motivated and are keen on working on solutions that power the No.1 entertainment ticketing company in India. Someone who is focused on quality and delivery with good communications skills and looks at roadblocks and challenges as just another milestone. Join us and use your skills to change the entertainment ticketing landscape in the country.

BookMyShow is looking for a skilled information security analyst to be part of our InfoSec team. As an information security analyst, you will be responsible for monitoring, fixing the security issues, interacting with different teams regarding security issues, and documenting security incidents.

You’re Profile

IAM – Cloud and Internal Services

Vulnerability Assessment Scans – Internal and external

Static and Dynamic Application Security Testing – Web, Mobile, and mWeb

Security report creation

Monitoring security alerts in multiple tools

Interaction with other teams regarding security related issues and/or requirements

Analysis of security of various tools and applications.

Conducting security periodic audits to identify security violations.

Implementation of security best practices

Delivering security awareness training to employees

You’re Checklist

Good understanding of networking protocols, devices, and concepts

Working experience on on-premise firewall and WAF solutions

Basic knowledge of SIEM technologies

Knowledge of security of containers and container orchestration

Working knowledge on CSPM and EDR solutions

SAST and DAST

Web and mobile security testing

Working knowledge on cloud platforms (AWS is compulsory)

Working knowledge of vulnerability assessment tools (Nessus is compulsory)

Working knowledge of security tools like Burp suite, Metasploit, Nessus, Wireshark

Knowledge of VPN, Proxy, and network segmentation

Knowledge of email and endpoint security

Knowledge of CDN