Application Security Engineer

MoEngage is an intelligent customer engagement platform, built for customer-obsessed marketers and product owners. We enable hyper-personalization at scale across multiple channels like mobile push, email, in-app, web push, on-site messages, and SMS. With AI-powered automation and optimization, brands can analyze audience behavior and engage consumers with personalized communication at every touchpoint across their lifecycle. Fortune 500 brands and Enterprises across 35 countries such as Deutsche Telekom, Samsung, Ally Financial, Vodafone, and McAfee along with internet-first brands such as Flipkart, Ola, OYO and Bigbasket use MoEngage to orchestrate their cross-channel campaigns and engage efficiently with their customers sending 3.2+ billion messages to 1.2 billion monthly active users! Our vision is to build the world’s most trusted customer engagement platform for the mobile-first world. We promise to care about your customers as much as you do. And that justifies our top ratings for service and support in Gartner Magic Quadrant, Gartner Peer Insights, and G2 Summer Reports. We have also been recognized as one of the 25 Highest Rated Private Cloud Computing Companies To Work For in a list released by Battery Ventures, a global investment firm based on the employee feedback on Glassdoor where employees reported the highest levels of satisfaction at work during the first six months of the pandemic."

Does this sound like you? ● You enjoy solving challenging technical problems. ● You have an experience that shows breadth and depth of security knowledge. You are strong in multiple domains of software security. ● You know how to work as a partner with product teams and give them the advantage of your security experience. ● You recognize, adopt, use, and recommend best practices in security engineering. ● You work ceaselessly to improve your knowledge of the security threat landscape and of technologies that enable new forms of attack and defence. ● You are an effective communicator who engages well with technical and non-technical audiences alike. As a Security Engineer, you will: ● Drive various application security initiatives to perform end-to-end security reviews to ensure critical information is appropriately protected. Identify security vulnerabilities and risks, and develop mitigation plans. ● Provide security architecture and design consultations to product teams, to help them build applications that are secure from the start. ● Evaluate and recommend new and emerging security technologies for use inside and outside the security organization. ● Produce creative and inventive solutions for large problems. Participate in projects that develop new intellectual property. ● Be an advocate for customer trust. ● Perform regular VA/PT for web, API and SDK ● Identify process gaps in our application security pentesting and vulnerability Management.

Skills that you would need

● Ability to implement and drive information and data security initiatives for MoEngage SaaS Application. ● Exposure to multiple security engineering disciplines such as application security, secure software development, cryptography, network security, system security, and security policy. ● Deep knowledge of common software vulnerabilities, such as OWASP Top 10 and CWE/SANS Top 25 ● The desire to solve security challenges at scale, and work on securing the next generation of applications powering the most sophisticated customer engagement platform ever built. ● Experience in providing practical solutions that enable product teams to meet business goals while controlling security risk. ● Ability to solve problems at their root and step back to understand the broader context. ● Deep understanding of the interplay between attack and defence. Familiarity with current network security and application security tools and how to apply them. ● Ability to promote secure design principles and a security-focused outlook across a large organization. ● Good understanding of information security policies, practices, and standards.

Requirements

● Bachelor's degree in computer science, computer engineering. ● 3 to 6 years of experience in the application security domain. ● Detailed technical knowledge and conceptual understanding of Application Security Concepts, tools and practices. ● Good to have experience in Secure Code Assessment, Dynamic Assessment, Secure Code Assessment and risk identification. ● Good to have experience in security vulnerability assessments and remediation techniques. ● Thorough understanding of OWASP Top 10, their attack & defense mechanisms (XSS, SQLi, CSP, CORS, SSRF) ● Understanding of different AuthN/AuthZ frameworks ( oAuth, SAML) ● Should be familiar with common tools (checkmarks, Postman and Burpsuite) Key Skills: Application Security Testing, Secure SDLC, Secure code review, Application Security, Threat Modeling, OWASP Top10