SalariesSign in
AboutPrivacyTerms
Senior Lead Engineer, Information Security
Majesco

Senior Lead Engineer, Information Security

IndiaRemoteFull-time
Posted Oct 4
Apply

Job Description

Key Responsibilities

Security Engineering & Architecture

  • Design, implement, and maintain enterprise security controls across cloud, infrastructure, and application environments.
  • Evaluate emerging threats and technologies and recommend improvements to the organization's security architecture.
  • Develop security standards, engineering patterns, and technical guidance to improve the overall security posture.

Security Automation & DevSecOps

  • Design and develop security automation solutions that improve operational efficiency and reduce manual effort.
  • Integrate security controls and validation activities into CI/CD pipelines and software delivery workflows.
  • Build and maintain GitHub Actions and related automation to support secure development practices.
  • Automate vulnerability management, policy enforcement, reporting, and remediation tracking activities.

Application Security

  • Lead security engineering efforts focused on protecting internally developed applications and APIs.
  • Perform and coordinate:
    • Threat modeling
    • Secure design and architecture reviews
    • Secure code reviews
    • Static Application Security Testing (SAST)
    • Dynamic Application Security Testing (DAST)
    • Software Composition Analysis (SCA)
    • Open-source dependency and supply chain security reviews
    • Secret and credential exposure detection
    • API security testing and assessments
    • CI/CD pipeline security reviews
    • Security validation of application deployments
  • Partner with development teams to identify, prioritize, and remediate security risks.

Web Application Firewall (WAF) & Edge Security

  • Design, implement, and maintain Web Application Firewall (WAF) capabilities.
  • Develop and tune security rules, attack detection logic, bot mitigation, rate limiting, and application-layer protections.
  • Continuously monitor and improve protections against OWASP Top 10 and emerging web application threats.

Offensive Security & Penetration Testing

  • Conduct application red team exercises and adversarial security assessments.
  • Perform manual and automated penetration testing of web applications, APIs, and supporting services.
  • Simulate real-world attack techniques to identify weaknesses in application design, authentication, authorization, and deployment architectures.
  • Document findings, provide remediation guidance, and validate corrective actions.

Collaboration & Security Operations Support

  • Partner with engineering, infrastructure, and cloud teams to implement secure solutions.
  • Support incident response investigations involving applications, cloud services, and development platforms.
  • Provide technical leadership and mentorship on security engineering practices and security tool adoption.

Success Measures

  • Increased automation and efficiency of security processes.
  • Successful integration of security controls into engineering and CI/CD workflows.
  • Reduction of application and cloud security risks.
  • Effective implementation and management of WAF protections.
  • Timely identification and remediation of vulnerabilities.
  • Successful execution of penetration testing and red team activities.
  • Improved security posture across applications, APIs, and software delivery platforms.

Originally posted on Himalayas

View job

Manager, Incident Response

Kroll

  • Canada
  • Remote
  • Full-time
Apply
Oct 4
View job
K

Security Specialist

Kreative Technologies

  • United States
  • Remote
  • Full-time
Apply
Oct 4
View job

IS Applications Security Analyst - Remote

Providence

  • United States
  • Remote
  • Full-time
Apply
Oct 4
View job

Information Security Analyst

WIRE IT

  • Portugal
  • Remote
  • Full-time
Apply
Oct 4
View job

Senior Lead Engineer, Information Security

Majesco

  • India
  • Remote
  • Full-time
Apply
Oct 4
View job

Senior Enterprise Security Engineer

abridge

  • United States
  • Remote
  • Full-time
Apply
Oct 4
View job

Engineer, Cloud Security

Navitus Health Solutions

  • United States
  • Remote
  • Full-time
Apply
Oct 4
View job

Principal Security Engineer - Akamai Inference Cloud

Akamai Technologies

  • United States
  • Remote
  • Full-time
Apply
Oct 4
View job

Security Operations Specialist

BB-inIT

  • Netherlands
  • Remote
  • Full-time
Apply
Oct 3
View job

AI & Compliance Specialist

LUZA Group

  • Portugal
  • Remote
  • Full-time
Apply
Oct 3
View job

Lead Engineer, Information Security

Majesco

  • India
  • Remote
  • Full-time
Apply
Oct 3
View job

Security Subject Matter Expert

Keys Recruiters

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Secure SDLC Architect: DevSecOps

Akamai Technologies

  • Poland
  • Remote
  • Full-time
Apply
Oct 3
View job

Mac Users Needed for AI Security Research | $25 USD | Work From Home

Your Personal AI

  • Worldwide
  • Remote
  • Contract
Apply
Oct 3
View job

Network Provisioning Engineer / Security Architect

Akamai Technologies

  • Poland
  • Remote
  • Full-time
Apply
Oct 3
View job

Cloud Security Engineer

Datavant

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Network Security Architect | Cybersecurity Expert | Palo Alto (certified) / Remo

Kapres Technology, S.L.

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Principal Engineer – Identity Management (IAM & Golang Backend)

Xsolla

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Software Engineer II - Identity Security Posture Management (ISPM)

Abnormal Security

  • Singapore
  • Remote
  • Full-time
Apply
Oct 3
View job

Principal Software Engineer - Identity & Access Management

Sezzle

  • Mexico
  • Remote
  • Full-time
Apply
Oct 3
View job

Senior Security Operations Engineer

SunCore Digital

  • United Kingdom
  • Remote
  • Full-time
Apply
Oct 3
View job

Senior Manager, GRC Engineering (Special Programs)

Workstreet

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Information Security Analyst

mercor

  • Canada
  • Remote
  • Contract
Apply
Oct 3
View job

Cybersecurity Advisor - IAM | Remote, TX, MO, KS, or OK

Optiv

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

IT GRC Specialist - Fully Remote | Upto $120/hr

mercor

  • Canada
  • Remote
  • Full-time
Apply
Oct 3
View job

Full Stack Lead – IAM Solutions

AHEAD

  • India
  • Remote
  • Full-time
Apply
Oct 3
View job

Director of Products - Storage Security

OPSWAT

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Application Security Engineer

DecisionPoint Corporation

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Cloud Cybersecurity Manager

DecisionPoint Corporation

  • United States
  • Remote
  • Full-time
Apply
Oct 3
View job

Identity & Access Management (IAM) Engineer

DecisionPoint Corporation

  • United States
  • Remote
  • Full-time
Apply
Oct 3
PreviousPage 64 of 126Next
Majesco

Senior Lead Engineer, Information Security

IndiaRemoteFull-time
Posted Oct 4
Apply

Job Description

Key Responsibilities

Security Engineering & Architecture

  • Design, implement, and maintain enterprise security controls across cloud, infrastructure, and application environments.
  • Evaluate emerging threats and technologies and recommend improvements to the organization's security architecture.
  • Develop security standards, engineering patterns, and technical guidance to improve the overall security posture.

Security Automation & DevSecOps

  • Design and develop security automation solutions that improve operational efficiency and reduce manual effort.
  • Integrate security controls and validation activities into CI/CD pipelines and software delivery workflows.
  • Build and maintain GitHub Actions and related automation to support secure development practices.
  • Automate vulnerability management, policy enforcement, reporting, and remediation tracking activities.

Application Security

  • Lead security engineering efforts focused on protecting internally developed applications and APIs.
  • Perform and coordinate:
    • Threat modeling
    • Secure design and architecture reviews
    • Secure code reviews
    • Static Application Security Testing (SAST)
    • Dynamic Application Security Testing (DAST)
    • Software Composition Analysis (SCA)
    • Open-source dependency and supply chain security reviews
    • Secret and credential exposure detection
    • API security testing and assessments
    • CI/CD pipeline security reviews
    • Security validation of application deployments
  • Partner with development teams to identify, prioritize, and remediate security risks.

Web Application Firewall (WAF) & Edge Security

  • Design, implement, and maintain Web Application Firewall (WAF) capabilities.
  • Develop and tune security rules, attack detection logic, bot mitigation, rate limiting, and application-layer protections.
  • Continuously monitor and improve protections against OWASP Top 10 and emerging web application threats.

Offensive Security & Penetration Testing

  • Conduct application red team exercises and adversarial security assessments.
  • Perform manual and automated penetration testing of web applications, APIs, and supporting services.
  • Simulate real-world attack techniques to identify weaknesses in application design, authentication, authorization, and deployment architectures.
  • Document findings, provide remediation guidance, and validate corrective actions.

Collaboration & Security Operations Support

  • Partner with engineering, infrastructure, and cloud teams to implement secure solutions.
  • Support incident response investigations involving applications, cloud services, and development platforms.
  • Provide technical leadership and mentorship on security engineering practices and security tool adoption.

Success Measures

  • Increased automation and efficiency of security processes.
  • Successful integration of security controls into engineering and CI/CD workflows.
  • Reduction of application and cloud security risks.
  • Effective implementation and management of WAF protections.
  • Timely identification and remediation of vulnerabilities.
  • Successful execution of penetration testing and red team activities.
  • Improved security posture across applications, APIs, and software delivery platforms.

Originally posted on Himalayas