Responsibilities

• Evaluate the security of systems being productionised and providing insights into security vulnerabilities and alleviation plan across SDLC
• Run penetration testing of Mobile Apps, APIs and End Points and proactively identify security vulnerabilities
• Drive security audits for products/features to model threats and develop mitigation plans
• Stay updated on the emerging security threats, vulnerabilities and controls and apply them to the Go-Jek ecosystem
• Suggest automation for repeatability in testing for common vulnerabilities
• Track, debug and work closely with the developers to resolve security issues.
• Act as a liaison for security incident response (Internal and External as needed)
• Establish training programs to build general security awareness and to address specific technology requirements for security
• Mentors peers to inculcate security best practices and induce sensitivity to security needs

Requirements

• 6-10 years of hands on experience in penetration testing of mobile applications, APIs and Web Applications
• Detailed working knowledge of application vulnerabilities for consumer mobile applications (Android, iOS) and API endpoints and remediation techniques
• Working experience with penetration testing and development of exploits
• Breadth of technical knowledge in application security (OWASP Top 10), mobile security, data security, authentication and security protocols, and cryptography
• Ability to analyse attacks based on logs & conclude the action plan on mitigation
• Ability to reverse engineer Apps and unearth vulnerabilities in code, leakage of information and common threats
• Excellent troubleshooting skills
• Passion to learn new things, solve challenging problems
• Ability to Get Stuff Done!