Required Skills

- Proven experience in information security, with a background in security operations,

application security, or related roles.

- Skilled in identifying, analyzing, and handling phishing attempts and other social

engineering threats.

- Robust knowledge of modern web application security practices and frameworks.
- In-depth understanding of the Secure Software Development Life Cycle (SSDLC).
- Experience implementing security automation for testing, monitoring, or orchestration

workflows in Typescript or similar.

- Proficiency in container technologies, such as Docker and Kubernetes, and serverless

environments like AWS Lambda, with hands-on experience securing cloud-based

applications, preferably in AWS.

- Knowledge of securing microservices-based architectures.
- Practical experience conducting security assessments, including Static Application

Security Testing (SAST),



Dynamic Application Security Testing (DAST), and Software

Composition Analysis (SCA).

- Experience managing vulnerabilities through bug bounty programs, penetration testing,

and automated security scanning.

- Understanding of security and privacy frameworks, such as GDPR, ISO 27001, and SOC 2,

is an asset.

- Strong English communication and presentation abilities, with the capacity to explain

complex security concepts to both technical and non-technical audiences.

Nice to have:

- Experience in a DevSecOps role
- Experience with Incident Response
- Experience with Forensics
- Achieved certifications like f.e OSCP, CISSP, CEH or AWS Security Specialty

📌 Senior SecOps Engineer (Pune)
🏢 Shavish Group
📍 Pune