Product Security Engineer II

About the Role: This role is part of the Risk & Compliance Team, Engineering division of Zeta. The Product Security Engineer is responsible to secure all mobile & web applications along with API s by breaking and hacking them and educating Developers as well as DevOps teams on how to fix them. The objective is to make zeta applications and platforms secure. As Application Security Engineer of the Product Security sub-division, you will be responsible for securing all the Zeta s Products. You will be working as an individual contributor reporting to a manager. Perform regular VA/PT for Web & Mobile applications, API & Infrastructure Guide developers in fixing security issues. Regular code reviews Involve in application design discussions. Perform Threat Modelling of Web/Mobile applications. Develop secure code practices and educate dev and QA engineers by building security standards, policies for secure coding, secure data handling, secure networking, secure crypto implementation, etc. Evaluate & Integrate security testing tools (SAST, DAST,SCA) in to CI/CD pipelines. Responsibilities: Guide the technology organizations security and privacy initiatives by participating in design reviews and threat modeling. The applications are developed by the developers and product managers, and you will make sure the applications are secured and hardened. You will define the scope and ensure continuous adherence to the scope of projects at each phase (initiation to sustenance/maintenance phase). You will be responsible for creating visibility, and adoption of the projects meant for internal customers. Act as a security engineering expert and technical champion within Zeta. Assess gaps, and tools to improve application security Liasioning with all external and internal stakeholders for the team. Mentoring developers and QA. Evaluate bugs reported through the Bug Bounty program. Run security posture of various applications across BU s. Continuous improvement of web/mobile application security Quarterly VA/PT (internal/external, authenticate/non-authenticated) for mobile/web. Secure configuration of Web/Mobile application, DB Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.