Information Technology Security Specialist

Job Description: Security Engineer - Information Security Position: Security Engineer Location: Bengaluru Experience: 6-9 years Skills Required: AI, API, AWS, Azure, GCP, Go, Java, JavaScript, Cryptography, GraphQL, Palo Alto, Python, Threat & Vulnerability Management Minimum Requirements:

• Bachelor’s Degree in Computer Science, Information Systems, or a related field.
• 6-9 years of experience in information security.
• Proficiency in deploying information security tools, gathering functional requirements, and conducting data analysis.
• Strong knowledge of desktop software, office automation tools, and information security risk management.
• Certification in CISSP, CISM, CSSLP, CISA, CRISC, or OSCP is a plus.

• Expertise in threat modeling frameworks (e.g., ATT&CK, STRIDE) and application security controls (Web, API, Mobile, AI).
• Experience with DevSecOps and frameworks like NIST 800-53, CSF, OWASP ASVS.
• Strong understanding of cryptography controls and IAM standards (OAuth 2.0, OIDC, JWT).
• Cloud security experience across AWS, Azure, or GCP.
• Familiarity with application architectures, databases (Oracle, SQL, NoSQL), and secure coding standards.

• Conduct security risk assessments and threat modeling for applications.
• Develop and manage governance processes for application security and DevSecOps programs.
• Ensure compliance with security controls and validate implementation using scanning tools.
• Maintain and enhance secure design patterns, threat libraries, and coding standards.
• Provide consultancy on threat modeling and collaborate with application teams to address security concerns.
• Create reports, develop business cases, and support decision-making processes.
• Facilitate Agile events, ensuring alignment with security objectives and business priorities.
• Monitor industry trends to recommend innovative security solutions and enhance organizational resilience.