Flipkart Hiring For Senior Security Engineer – Application Security at India Full Time

About the team:
The Security Assurance team is a central team of the Information security department, with primary responsibility of design and implementation review & assessments,, vulnerability testing, stress testing and assessment of security controls for its efficiency and efficacy in protecting systems, applications and network from cyber threats.We aim to Identify, monitor, and define the requirements of the overall security of the system and responsible for ensuring Flipkart is adhering to mandated statutory and industry infosec requirements.
About the role:
Flipkart is seeking a skilled, motivated, and collaborative Individual for the Designation of Senior Security Engineer – Security Assurance.
In this role, you will be a key member in the Information Security team to move forward the Security Assurance of network systems with industry best practices implemented by influencing business leaders across the Flipkart enterprise.
You will serve as an expert and be a mentor to the information security core team. You will be a strong communicator and influencer, demonstrating curiosity to learn and understand the business.
What you’ll do:

• Perform vulnerability testing, risk analysis and security assessments before going live.
• Identify network, server, router, and firewall problems before they become critical.
• Find defective and misconfigured software.
• Continuously monitoring for changing cyber threats, Identify and communicate current and emerging cyber security threats to relevant stakeholders
• Perform assurance services to assess IT security controls across various platforms (Linux, Unix) and regulations (example SOX, PCI DSS)
• Collaborate with cyber defense team in responding to security-related incidents and provide thorough remedial solutions and analysis
• Review and approve installation of security solutions and ensure validation of security systems to ensure they behave as expected
• Maintaining and administering perimeter security systems such as firewalls and intrusion detection systems.
• Automation & Scripting in Bash & Python
• Investigating intrusion and hacking incidents, collecting incident responses, and carrying out forensic investigations.
• Validate Identity and access management (IAM) configurations.
• Securing endpoints or entry points of end-user devices such as desktops, laptops, and mobile devices from being exploited by malicious actors and campaigns.
• Secure Email Gateways provide pre delivery protection by blocking email based threats before they reach a mail server.
• Develop, test and modify custom security testing scripts for vulnerability testing
• Identify critical flaws in systems, applications and network, which if remains unmitigated cyber attackers can potentially exploit
• Plan and perform vulnerability assessments for networks, applications and systems
• Conduct network security audits and scanning on a predetermined basis
• Use automated tools to detect vulnerabilities and reduce time-consuming tasks
• Use manual testing techniques and methods to gain a better understanding of the environment and reduce false negatives
• Compile and track vulnerabilities over time for metrics purposes
• Write and present a comprehensive Vulnerability Assessment and maintain a database
• Supply hands-on training for network and systems administrators

What you’ll need:

• Bachelor’s / Master’s degree in Computer science
• 5+ years of broad information security experience
• Hands on experience of Azure, GCP cloud operating model and relevant Security Practices
• Ability to communicate and report network security incidents and issues to the upper management.
• Thorough understanding of the latest technologies, security principles, and protocols.
• Experience in creating and maintaining security systems.
• Self-motivated and detail-oriented.
• Proficient with Windows, Unix, and Linux Operating Systems Environment.
• Deep Understanding of Network elements such as Switches , Routers, Firewalls, IPS/IDS and the related RuleSets, ACLs.
• Security Certifications would be treated as a plus. Examples include: CISSP, CISA, CRISC, OSCP
• Able to work independently and efficiently, as well as with others, to meet deadlines in a fast-paced environment.