App Security Engineer

Location

Bangalore | India

Job description

Curefit Healthcare Pvt Ltd is India's largest fitness company. Founded in 2016 by Mukesh Bansal and Ankit Nagori, Curefit offers a comprehensive range of fitness services and products through its two brands, cult.fit and cult.sport. With a mission to make fitness fun, easy and accessible, cult.fit offers group workouts, online classes, sports facilities, and personalized solutions at fitness centers & partner gyms across the country. By adopting innovative subscription-led revenue models and employing cutting-edge technological interventions to cultivate healthy habits, cult.fit has emerged as the go-to destination for fitness enthusiasts across the country. cult.sport focuses on simplifying health and well-being by offering smart fitness products tailored to the everyday athlete. The cult.sport product range is thoughtfully designed to deliver the ultimate workout experience, featuring high-quality sportswear, versatile at-home workout equipment, bicycles, and nutraceuticals.

Where is this role

This role is part of the Security Team, Engineering division of Cure.fit . The App/Cloud Security professional is responsible for creating the securing and automating the environment, coming up with project roadmap, setting processes in place, creating CI/CD roadmap etc. Guide Developers and DevOps teams about new threats and help harden infrastructure and applications from various attacks as needed. The objective is to make Cure.fit applications and infrastructure secure.

Exp - 1-4 years

5 Days Work from office

What are you expected to be good at

To be successful in this role, the following are the areas of expertise classified by their importance:

Critical

• Solid understanding of public cloud technologies with hands-on technical knowledge of at least one major public cloud like AWS
• Experience in at least one scripting language (Bash, Python, Java etc)
• Experience of at least 2 active and passive security tooling using open source tools (OWASP ZAP, Veracode, Checkmarx, Fiddler etc)
• Experience of tools like Nessus, AWS WAF and AWS Guard Duty.

Good To Have

• Certifications like AWS Certified Security Specialty, Certified Kubernetes Administrator (CKA), Certified Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), OSCP, OSEE, OSWE/AWAE, CISSP, SANS GPEN/GXPN etc.
• Experience with Secure Code Quality Tools, Testing and Techniques - ZAP, Wireshark, Sonarqube, Metasploit etc.
• Application Security testing
• Passionate about security and automation. Only Devops need not apply .

What are your responsibilities

• Implement cloud security initiatives for entire organization Improve Cloud security posture and Kubernetes security using CI/CD Understand by regular gap assessment, Provide support in detection and mitigation of cyber security vulnerability and incidents for Cloud
• Oversee the planning and coordination of Cloud security Deploy, Maintain and Support Log Aggregation, Vulnerability and Threat Detection Solutions with associated visualizations so that real-time identification of issues can be performed.
• Continuous improvement of Cloud Security posture
• Ensure that Security Standards are being adopted by the Product Team

Job tags

Salary