Security Engineer
WebEngage
IndiaremotePosted 6 days ago
Skill Required
Security-EngineerCompliance-EngineerCloud-Security-EngineerCybersecurity-EngineerInformation-Security-EngineerIT-Security-EngineerSecurity-EngineeringSoftware-Security-EngineerSecurity-Software-EngineerNetwork-Security-EngineerSystems-Security-EngineerSecurity EngineersecurityEmail MarketingPenetration TestingBackup and RecoveryCloud Securityrelated fieldCybersecurityCD pipelinesCryptographyEngineeringISO 27001networkingautomationObservabilityanalyticsNode.jsfintechwrittenTestNGPythonDevOpsAzureCI/CDOWASPCloudFulltime
Key highlights
- 3 to 5 years of relevant experience required
- Bachelor's degree in Engineering or related field required
- Includes MacBook for employees
- Full-stack retention operating system
Role overview
WebEngage is an enterprise-grade customer engagement and retention platform, built for scale, complexity, and outcomes, that helps global brands turn data into measurable revenue impact. The Security and Compliance Engineer will play a pivotal part in maintaining and enhancing the company's security posture, ensuring compliance with industry standards, and collaborating across teams to mitigate risks within this dynamic SaaS environment.
Responsibilities
- Conduct penetration tests using specialized tools to identify vulnerabilities and collaborate with Development or DevOps teams to plan and implement remediation strategies.
- Coordinate with external Vulnerability Assessment and Penetration Testing (VAPT) vendors for audits, serving as the liaison between the vendor and the engineering team.
- Partner with the DevOps team to perform cloud security audits and develop remediation plans.
- Respond to security questionnaires from customers or vendors and address security-related questions during virtual meetings.
- Lead security-related projects, providing regular progress updates and reports.
- Implement and configure tools to enhance security practices, including static code analysis and automated code audits.
- Manage the security calendar and execute activities such as Cloud Business Continuity Planning (BCP) and Disaster Recovery (DR) exercises in collaboration with the DevOps team.
- Conduct cryptographic audits (including encryption at rest and in transit) and key rotation processes with DevOps support.
- Conduct audits of automated code quality checks within CI/CD pipelines.
- Review standard operating procedures to ensure adherence and timely execution.
- Oversee the compliance calendar for standards such as ISO 27001, ISO 27701, SOC 2, and future certifications.
- Coordinate with responsible teams to ensure all required activities are completed on schedule.
- Respond to technical and process-related inquiries during audits alongside other team members.
- Monitor and ensure employee security training and retraining programs are up to date.
- Track and maintain all security-related metrics.
- Handle any additional audit-related tasks.
Requirements
- Bachelor's degree in Engineering or equivalent in a related field, such as Computer Engineering, Electronics, or Telecommunications.
- 3 to 5 years of relevant experience in security, compliance, or a similar role.
- Strong understanding of SaaS applications and associated security challenges.
- Familiarity with one or more cloud platforms, such as AWS, GCP, or Azure.
- Knowledge of fundamental networking concepts, including OSI layers, TLS protocols, and cryptography.
- Proficiency in at least one scripting language (e.g., Python, Java, Node.js).
- Awareness of common security risks, including OWASP Top 10, CIS Benchmarks, and recent CVE vulnerabilities.
- Excellent verbal and written communication skills for interacting with internal and external stakeholders, as well as project reporting.
- Commitment to continuous learning and staying current with evolving security trends.
Nice to have
- Experience with security compliance frameworks such as ISO 27001, ISO 27701, SOC 2, HIPAA, or similar.
- Relevant cybersecurity certifications.
Benefits
- Monthly & quarterly town hall meetings for company transparency.
- Inclusive work culture promoting a relaxed, creative, and productive environment.
- Autonomy, open communication, and growth opportunities.
- Access to cutting-edge tools and mentorship.
- MacBook provided for Engagers.
- Best in class medical insurance (with Covid Care facilities).
- Programs for taking care of mental health.
- Contemporary Leave Policy (beyond sick leaves).
Additional details
- WebEngage platform includes a Customer Data Platform (CDP), real-time behavioral segmentation, omnichannel journey orchestration, AI-driven personalization, deep analytics, and WebEngage BLACK (AI-native layer).
- Responsibilities are non-exhaustive; onboarding procedures are provided and ownership grows over time.
- WebEngage is an equal opportunity employer committed to diversity and inclusion.
- Originally posted on Himalayas.