Responsibilities

• Evaluate the security of systems being productionised and providing insights into security vulnerabilities and alleviation plan across SDLC
• Automate security testing, network audits, user access audits, etc
• Build dashboards for all automation tool to demonstrate impact of audit
• Drive security audits for products/features to model threats
• Stay updated on the emerging security threats, vulnerabilities and controls and apply them to the Go-Jek ecosystem
• Track, debug and work closely with the developers to resolve security issues.
• Establish training programs to build general security awareness and to address specific technology requirements for security
• Mentors peers to inculcate security best practices and induce sensitivity to security needs

Requirements

• 6-10 years of hands on experience in coding tools for security team
• Excellent programming skills on backend & frontend technologies
• Exposure to security in cloud infrastructure
• Detailed working knowledge of application vulnerabilities for consumer mobile applications (Android, iOS) and API endpoints and remediation techniques
• Breadth of technical knowledge in application security (OWASP Top 10), mobile security, data security, authentication and security protocols, and cryptography
• Ability to analyse attacks based on logs & build automation around log analysis
• Ability to automate most part of manual testing tasks
• Ability to evaluate tools and frameworks for static/dynamic security testing, security monitoring and security controls
• Excellent troubleshooting skills
• Passion to learn new things, solve challenging problems
• Ability to Get Stuff Done!