Senior Security Engineer - Application Security

August 28

Apply Now

Receive Emails with Similar Jobs

Disney+ Hotstar

WebsiteLinkedInAll Job Openings

Disney+ Hotstar is leading the way as the largest and smartest video platform in the country, reaching over 300 million users today$1. .$1

Video on Demand • Live Streaming • Entertainment • Technology • Social Gaming

501 - 1000

Description

• Work on new product features to make Hotstar users and data more secure by involving right from the walkthrough of the product features and practicing secure SDLC • Think out of the box in building attack scenarios • Come up with the threat landscape right from the inception of the idea to product solution to the architecture and implementation of the solution • Proactively identify vulnerabilities across our platform and recommend fixes • Ownership of the tasks • Inclination towards learning multiple areas of security and build competency to deliver a wide spectrum of security like cloud security, operating systems etc. • Adapt to technologies/languages/platforms/frameworks of the time • Innovate to identify the security vulnerabilities as fast as possible in the lifecycle • Promote the culture of security first at Hotstar • Identifying the problem statements which upon solving will increase the security posture of Hotstar

Requirements

• 4 to 6 years of experience in doing security assessments on web applications, Android and iOS mobile applications in microservice architecture • In-depth knowledge of security vulnerabilities not just limited to OWASP Top 10 • Experience in using the security tools to carry out the manual as well as automated security assessments • Experience working with common product flows like payment gateway integration, authentication etc. • Knowledge of how applications get built which may help in multiple scenarios to break the very things • Passion for security, and a practical and balanced approach to security issues • Ability to visualize the root cause and deep dive • Experienced with securing AWS infrastructure managed and provisioned using IaC • Extensive knowledge of security risks and mitigations through process and technology, especially for cloud-based applications and infrastructure • Curiosity in knowing how things work in different conditions • Independent, self-motivated and comfortable working in a fast-paced environment with teams ranging from product to engineering teams • Contributions to the security community is a huge plus and shouldn’t be a tool junkie • Lazy,so that could make machines work for him/her [automation]