About Galaxy:
Galaxy Office Automation Pvt. Ltd is a leading technology solutions provider and helps organizations to digitally transform their business. Over the past 38 years, we have strived to help our customers meet the most difficult challenges by providing innovative solutions that integrate cutting edge technologies. We have been constantly upgrading our portfolio of solutions and skills to keep up with the fast-changing digital world. Our vast experience across various industries, large investments in developing skills and solutions, ability to execute complex transactions and over 300+ professionals put us in the best position to deliver transformational solutions to our clients.
Job Description
We are seeking an experienced Application Security / Product Security Engineer to help secure our applications and products throughout the software development lifecycle. The ideal candidate will have strong knowledge of cloud-based architectures, application security best practices, and secure SDLC,
along with hands-on experience performing security design reviews and application testing across web, API, mobile, and thick client applications. This role requires close collaboration with engineering, architecture, DevOps, and product teams to identify security risks early and ensure secure product development.
Key Responsibilities
- Integrate security practices into the Software Development Lifecycle (SDLC).
- Perform application security design reviews for current and existing products.
- Conduct manual and automated security testing of: o Web applications o REST / GraphQL APIs o Mobile applications (Android / iOS) o Thick client / desktop applications
- Identify vulnerabilities such as OWASP Top 10, authentication issues, authorization flaws, and API security risks.
- Review cloud architecture and deployments (AWS, Azure, GCP) for security best practices.
- Work with development teams to prioritize and remediate vulnerabilities.
- Perform threat modeling and security