11+ Threat modeling Jobs in Hyderabad | Threat modeling Job openings in Hyderabad

Job Responsibilities:

Experience: 8 Yrs to 12 Yrs

1. Hands-on expertise on performing Application pen testing (Mobile(Android, IOS),networking, web application pen testing),
2. Should worked on IOT,AWS,Application Penetration Testing, Reverse Engineering, source code review, CI/CD Pipeline
3. have done any submission on Bug crowd or Bug Bounty.
4. have developed tools or scripts for web pen test on GitHub.
5. Certified on OSCP
6. Threat Modeling
7. Network scan in stealth mode or simple scan using Nmap and Burp suite

Implement security measures which monitor and protect sensitive data and systems from infiltration and cyber-attacks.

Developing different ways to solve the existing threats and security issues.

Configuring and implementing intrusion detection systems and firewalls.

Security product development, testing, and implementation.

Responsible for security technology research, penetration testing, and vulnerability scanning.

Please follow the below inputs.

The shift will starts from 03:00 PM to 12 AM (fixed for few months),

OSCP certification(Not mandatory, preferable)

Below are the primary key skills:

Total Application Security Experience:

Total Security Architecture Experience:

IOT(optional)

MOBILE

WEB

AWS(Mandatory)

NETWORKING

THREAT MODELS

About Company:

• Senior Engineer with a strong background and experience in cloud related technologies and architectures.
• Can design target cloud architectures to transform existing architectures together with the in-house team.
• Can actively hands-on configure and build cloud architectures and guide others.

• 3-5+ years of experience in AWS/GCP or Azure technologies
• Is likely certified on one or more of the major cloud platforms
• Strong experience from hands-on work with technologies such as Terraform, K8S, Docker and orchestration of containers.
• Ability to guide and lead internal agile teams on cloud technology
• Background from the financial services industry or similar critical operational experience
•  

Responsibilities:

The Senior Information Security Engineer is responsible for the implementation, execution and maintenance of technology solutions to mitigate risk, to protect the IT and Engineering environments by reducing the probability of, and to minimize the effects of, damage caused by malware, malicious activities and security events.

The individual will help protect the company by deploying, tuning, and managing security tools across the computing environment, as well as provide security incident response cycle support. They should have a passion and skills for identifying the latest cyber threats. The individual will:

Basic Qualifications

• Working knowledge of infrastructure-as-code and CI/CD pipelines tools (i.e. Jenkins, Teamcity, CircleCI etc..)
• Lead and participate in major day-to-day operational aspects of the security engineering team including improvement of current security controls while constantly identifying areas of needed improvement
• Deep hands-on security experience with cloud providers, such as AWS, GCP, Azure
• Understanding of automated security testing approaches and tools
• Experience with proactive integration of security into the development process
• Lead continuous improvement efforts of out security tools and systems (Concertation on SIEM, IDS, EDR Tools)
• Work with our customers (Security Operations, Incident Response, and Product teams) to incorporate high quality security alerting into their operational workflows
• Improve overall security practitioner efficiency through process automation
• Foster and promote collaboration among all members of the IT, Infrastructure, and Risk Management Departments.

Minimum Qualifications/Requirements

• BS or MS in Computer Science or related field
• Minimum 7+ years of cybersecurity experience
• Must have previous experience performing threat hunting and incident response duties using SIEM tools, cybersecurity management consoles, and ticketing systems
• Experience in deployment, development, and maintenance of SIEM
• Experience writing and using Ansible server administration scripts, and create simple Python, BASH, or Powershell scripts to automate cybersecurity functions
• Scripting experience to automate security operations, alerting, and compliance checks, CI/CD design, deployment, and management
• Experience with managing endpoint response and detection infrastructure and endpoints at the enterprise level, including performing upgrades to the back end application and deploying new agent versions to endpoints
• Understanding the investigative process and performing triage for cybersecurity incidents
• Experience maintaining industry leading security technologies or infrastructure systems in complex technical IT operations environment
• Must be detail-oriented and organized with ability to handle competing demands while meeting deadlines
• Experience in authentication protocols and frameworks to include OAuth, and AWS IAM
• Proactive and motivated; team player with a positive can-do attitude
• Strong analytical/problem-solving skills and cross-functional knowledge across multiple IT operational and security disciplines
• Ability to communicate technical concepts to a broad range of technical and non-technical staff
• Must possess a high degree of integrity, be trustworthy, and have the ability to lead and inspire change

• 8+ years of experience in software development
• 4+ years of recent hands-on experience in architecting and building complex solutions that run in SaaS/PaaS environments, especially on AWS cloud leveraging SaaS based Microservices development coupled with Distributed Caching & Message Queuing.
• Should have experience in developing solution architecture and/or evaluate architectural alternatives for private, public and hybrid cloud models, including IaaS, PaaS, and other cloud services
• Should have excellent knowledge of cloud architecture and implementation features (OS, multi-tenancy, virtualization, orchestration, elastic scalability)
• Should have experience with Full Stack development with experience in technology stacks/frameworks like JAVA, Springboot, Python, Redis, SQL, NoSQL and Graph DBs
• Good to have Architected solutions that handle Big Data and should be proficient in data analytics
• Must have Expert level proficiency in Design / Architectural patterns, data structures and algorithms
• Must demonstrate knowledge of DevOps tool chains and processes
• Experience in web-based application migration from on-premise to SaaS model is a big plus.
• Experience of Integration patterns and associated best practice(e.g. Web Services, REST API's, Pub/Sub, MOM)
• Excellent knowledge and hands-on experience in Web services related, functionally decomposed architecture, Load Balancing of Web Services and applications, designing multi-tenant systems, Clustering and sharding of data, microservices architecture / design patterns, and throttling and performance management of such services

Are you the one? Quick self-discovery test:

1. Love for the cloud: When was the last time your dinner entailed an act on “How would ‘Jerry Seinfeld’ pitch Cloud platform & products to this prospect” and your friend did the ‘Sheldon’ version of the same thing.
2. Passion: When was the last time you went to a remote gas station while on vacation and ended up helping the gas station owner saasify his 7 gas stations across other geographies.
3. Compassion for customers: You listen more than you speak.  When you do speak, people feel the need to listen.
4. Humor for life: When was the last time you told a concerned CEO, ‘If Elon Musk can attempt to take humanity to Mars, why can’t we take your business to run on the cloud?

So what are we looking for?

• Experience in On-premises to AWS cloud Migration. 
• Linux and Windows servers knowledge .
• Application knowledge like Java, .net, Python, Ruby.
• On-premises to Cloud migration assessment experience as a must .
• Able to provide a detailed migration analysis report and present it to the customer.
• Creative problem-solving skills and superb communication skills. 
• Respond to technical queries / requests from team members and customers. 
• Ambitious individuals who can work under their own direction towards agreed targets/goals. 
• Ability to handle change and be open to it along with good time management and being able to work under stress. 
• Proven interpersonal skills while contributing to team effort by accomplishing related results as needed. 
• Maintain technical knowledge by attending educational workshops, reviewing publications.

Job Responsibilities:

1. Managing  initiatives for migration and modernization in AWS cloud environment 
2. Leads and builds Modernization architecture solution from (on-prem or VMWare) into modern platform (Cloud AWS) through modular design by understanding application components 
3. Leads and SME in Modernization methodology and can lead the Design thinking workshop, method tailoring as Client environment and Client industry
4. The 6 most common application migration strategies below required
1. Re-host (Referred to as a “lift and shift.”)
2. Re-platform (Referred to as “lift, tinker, and shift.”)
3. Re-factor / Re-architect  
4. Re-purchase 
5. Retire
6. Retain ( Referred to as re-visit.)
5. Application migration analysis experience like application compatibility on the cloud, Network, security support on cloud.

Qualifications:

1. Is Education overrated? Yes. We believe so. But there is no way to locate you otherwise. So we might look for at least a Bachelor’s or Master's degree in engineering from a reputed institute or you should be programming from 12. 
1. And the latter is better. We will find you faster if you specify the latter in some manner. Not just a degree, but we are not too thrilled by tech certifications too :)
2. Architects with 10+ total and 6+ years of experience on Modernization applications and led Architecture initiatives on AWS Modernization.
3. Managed and implemented at least 5 engagement modernizing client applications to AWS Cloud and on WebSphere and Java/J2EE or .NET.
4. Experience on using DevOps tools during Modernization.
5. Complete in-depth experience and knowledge of AWS as a product and its components.
6. AWS certification would be preferred.
7. Experience in Agile fundamentals and methodology.

About the Role

Dremio’s SREs ensure that our internal and externally visible services have reliability and uptime appropriate to users' needs and a fast rate of improvement. You will be joining a newly formed team that will spearhead our efforts to launch a cloud service. This is an opportunity to join a very fast growth startup and help build a cloud service from the ground up.

Responsibilities and Ownership

• Ability to debug and optimize code and automate routine tasks.
• Evangelize and advocate for reliability practices across our organization.
• Collaborate with other Engineering teams to support services before they go live through activities such as system design consulting, developing software platforms and frameworks, monitoring/alerting, capacity planning and launch reviews.
• Analyze and optimize our core product by developing and implementing reliability and performance practices.
• Scale systems sustainably through automation and evolve systems by pushing for changes that improve reliability and velocity.
• Be on-call for services that the SRE team owns.
• Practice sustainable incident response and blameless postmortems.

Qualifications

• 6+ years of relevant experience in the following areas: SRE, DevOps, Cloud Operations, Systems Engineering, or Software Engineering.
• Excellent command of cloud services on AWS/GCP/Azure, Kubernetes and CI/CD pipelines.
• Have moderate-advanced experience in Java, C, C++, Python, Go or other object-oriented programming languages.
• You are Interested in designing, analyzing and troubleshooting large-scale distributed systems.
• You have a systematic problem-solving approach, coupled with strong communication skills and a sense of ownership and drive.
• You have a great ability to debug and optimize code and automate routine tasks.
• You have a solid background in software development and architecting resilient and reliable applications.

1. API
2. AWS