Required Skills
Proven experience in information security, with a background in security operations,

application security, or related roles.
Skilled in identifying, analyzing, and handling phishing attempts and other social

engineering threats.
Robust knowledge of contemporary web application security practices and frameworks.
In-depth understanding of the Secure Software Development Life Cycle (SSDLC).
Experience implementing security automation for testing, monitoring, or orchestration

workflows in Typescript or similar.
Proficiency in container technologies, such as Docker and Kubernetes, and serverless

environments like AWS Lambda, with hands-on experience securing cloud-based

applications, preferably in AWS.
Knowledge of securing microservices-based architectures.
Practical experience conducting security assessments, including Static Application





Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software

Composition Analysis (SCA).
Experience managing vulnerabilities through bug bounty programs, penetration testing,

and automated security scanning.
Understanding of security and privacy frameworks, such as GDPR, ISO 27001, and SOC 2,

is an asset.
Solid English communication and presentation abilities, with the capacity to explain

complex security concepts to both technical and non-technical audiences.

Nice to have:
Experience in a DevSecOps role
Experience with Incident Response
Experience with Forensics
Achieved certifications like f.e OSCP, CISSP, CEH or AWS Security Specialty

📌 Senior Secops Engineer Pune (India)
🏢 Shavish Group
📍 India