- Minimum 3 years of experience in Application security.
- Perform security assessment of web applications, Android, iOS mobile applications
- Good knowledge of security frameworks, secure coding practices, information security principles, Threat Modelling
- Must have Knowledge of the most common implementations of the Threats in application security (e.g. XSS, SQL Injection, XSRF, buffer overruns,business logics, brute force, etc) and how they match the general classification
- Familiarity with the tools for various security activities: Static Code Analysis, DAST Penetration Testing, Intrusion Detection/Prevention, etc.
- Proactively identify vulnerabilities across our platform and recommend fixes
- Ownership of the tasks
- Able to automate security activities
- Adapt to technologies/languages/platforms/frameworks of the time
- Promote the culture of security first at Pharmeasy
- Identifying the problem statements which upon solving will increase the security posture of Pharmeasy
What To Bring
- In-depth knowledge of security vulnerabilities not just limited to OWASP Top 10
- Experience in doing security assessments on web applications, Android and iOS mobile applications in microservice architecture
- Experience in using the security tools to carry out the manual as well as automated security assessments.
- Experience working with common product flows like Authentication, payment gateway integration, Business logics etc.
- Driving Security in SDLC
- Valuable understanding of AWS and GCP Cloud Platform
- Passion for security, and a practical and balanced approach to security issues.
- Independent, self-motivated and comfortable working in a fast-paced environment
Certifications (Good to have)
- 1. EC council - Certified Ethical Hacker (CEH)
- 2. Comptia security+
- 3. (ISC)2 Certified Information Systems Security Professional (CISSP)
- 4. Any other relevant security certifications