Information Security in Hyderabad at WebPipl

Job Description : • Information Security (Application/Infrastructure Security) No of years’ experience required: • 6 to 15 years Job Role: • Global service delivery of Information Security Architecture services for Daimler Commercial Vehicle locations. • Perform Threat Modelling, identification of Security Requirements by application and ensure testing of the applicable controls during DevOps cycle. • Prioritize remediation based on Threat Model and Security Requirements as well assist the development team in remediation. • Advise Product Owners to manage their security risks efficiently • Develop interpersonal relationships within the team and interacting with and across department and working with external suppliers and partners. • Enthusiastic and committed to the work, willing to help grow the business. • Experience in providing technical oversight to other project team members to maintain engagement quality. • Maintain expertise on security trends through training, research and development in order to mitigate potential security exposures. Technical Skills • Sound knowledge on information security principles, cloud security threat modelling, security architecture, system and network security, big data security, authentication and security protocols, cryptography, CI/CD security • Strong hands on cloud architecture, experience of working on large scale cloud based services (including SaaS, PaaS, IaaS) and understanding of security challenges involved in deploying Cloud Applications • Knowledge on Information Security fundamentals, OWASP tools and methodologies • Mandatory security certifications: one of the below certifications o CISSP (Certified Information Systems Security Professional) or o CSSLP (certified secure software lifecycle professional) or o CCSP (Certified Cloud Security Professional) • Having additional security certifications such as OSCP is a plus • Sound Knowledge of standard SDLC practices, understanding and familiarity with common code review methods and standards • Knowledge of common security attacks, post exploitation skills, security bug classification frameworks • Application development background and security knowledge – example of languages include C, C#, C++, Java, J2EE, Python, PHP or other major programming languages. • Effective understanding and implementation Risk Management process • Knowledge on Web/mobile/infrastructure security assessments (pen tests, code reviews, security checks and SDLC consulting) Other Skills/requirements • Bachelors/Masters in either Computer Engineering, Computer Science, or Information Systems Management • Proficient English language written and oral communication skills • Ability to complete tasks and deliver professionally written reports for clients • Ability to present findings to technical staff and executives • Experience in handling client queries, providing recommendations & mitigation strategies in order to remediate vulnerabilities. • Good to have experience in speaking or presenting at national and international security conferences and events. • Automotive Security background is a plus Location : Bangalore Job type : Full time