Job Description
Job description

We are seeking a talented Security Engineer to join our team. The ideal candidate should have a strong background in production security, Dev SecOps, and extensive experience with SDLC practices and multiple security tools, including but not limited to Qualys, Black Duck, and Prisma. As a Security Engineer, you will be responsible for ensuring robust security practices and implementing cutting-edge security measures to protect our systems and data.

Key Responsibilities

- Vulnerability Management:

- Own end-to-end vulnerability lifecycle for a given Business Unit consisting of multiple enterprise level products. (SaaS & on-prem).

- Triage, track, Correlate and remediate vulnerabilities from tools like Black Duck, Prisma Cloud, Qualys, Jfrog Xray etc. Understanding the working of these tools and mapping in a common tool.

- Co-ordinate with business security leads to plan patching strategies and risk mitigation.

- Security Automation:

- Integrate security scanning tools into common tools.

- In progress and SLA tracking for all the vulnerabilities and work closely with respective business units.

- Develop dashboards and reports for compliance and leadership visibility.

- Write high level design to automate a few of the manual work.

- Collaboration & Governance:

- Work cross-functionally with product teams, and stakeholders.

- Contribute to security policies, standards, and best practices.

- Participate in incident response and post-mortem analysis.

- Education & Awareness:

- Publish security advisories on high-priority vulnerabilities (CVEs).

- Helping Junior team members on security aspects.

- Kubernetes, container build pipeline, and repository platform knowledge is a plus.

- Familiarity with vulnerability scoring models like CVSS,EPSS,BDSA

RequirementsKey Technologies

- Security Tools: Black Duck, Prisma Cloud, Qualys, Snyk, Coverity, Sonar Qube, Nessus

- Dev Ops Stack: Jenkins, Kubernetes, Helm,



Docker

- Programming: Python, Shell, YAML, JSON (Good to have)

- Cloud Platforms: AWS, GCP (Understanding basics of Cloud) Success Metrics

- Reduction in high/critical vulnerabilities within SLA by working with security champion

- Increasing automation for doing mundane tasks

- Cross-team security engagement and support effectiveness

- Strong communication skills.

Requirements
Required Skills & Experience Core Technical Skills Solid proficiency in Python, SQL, PySpark. Hands-on expertise with Kafka, Kafka Connect, Debezium, Airflow, Databricks. Deep experience with Big Query, Snowflake, MySQL, Postgres, MongoDB. Solid understanding of vector data stores and search indexing. Knowledge of GCP services like Big Query, Cloud Functions, Cloud Run, Data Flow, Data Proc, Data Stream, etc.. Good to have Certifications: GCP Professional Data Engineer Elastic Certified Engineer AI Gemini Enterprise Vertex AI Agent Builder ADK Non-Technical & Leadership Skills Communication: Exceptional verbal and written communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences. Mentorship & Coaching: Proven experience in mentoring junior and mid-level engineers, fostering a culture of continuous learning and growth. Problem-Solving: Strong analytical and debugging skills, with a proactive approach to identifying and resolving technical roadblocks. Ownership & Accountability: Demonstrates a high level of responsibility for project outcomes, system reliability, and code quality. Agile Proficiency: Deep understanding and practical experience with Agile methodologies (Scrum/Kanban). Stakeholder Management: Ability to effectively manage expectations and build consensus across different teams. Qualifications Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field (or equivalent practical experience). Typically 7+ years of progressive experience in data engineering, with 2+ years in a technical leadership or lead engineer role.

📌 Security Engineer (India)
🏢 SquareShift Technologies
📍 India