RedLock

Security Content Developer * As a security content author, this role involves hands on security and compliance stuff. Prior experience with security tools (exploit development, port scanner and so on), scanner (OVAL, SCAP, Nessus, OpenVAS) would be a plus. As a member of security content team, you will be asked to develop and manage the security content, assume the full responsibility towards handling the content quality for the cloud services, with your value added knowledge that comes from your prior experience. You'll be asked to adhere to Redlock standards and procedures while developing the content. * Well known exposure to common vulnerabilities and knowledge on vulnerability common standards such as CVE, CVSS and CCE. * Expertise in authoring/mapping content for various security compliance standards both including regulatory (PCI, HIPAA, SoC2, SoC3, GDPR so on) and standard compliance frameworks such as NIST-800-53, CIS and so on is a must. * This role requires that, you've prior experience and hands on cloud services AWS, Azure and GCP (one of the 3 at least). * Expertise towards remediation of vulnerabilities or compliance (misconfiguration alerts), both via procedural and CLI methods.

RedLock is a fast growing cyber-security startup headquartered in California, with offices in Bangalore. Responsibilities: Responsible for complete software development life cycle including requirement analysis, design, development, deployment and support. Write clean, testable, readable, scalable and maintainable Java code that scales and performs well for thousands of customers Participate actively and contribute to design and development discussions Develop solid understanding and be able to explain advanced Cloud Computing and Cloud Security concepts to others Required: Strong computer science fundamentals (e.g. understanding of lock-free data structures, bloom filters, minimal perfect hashing, consistent hashing etc) Experience designing/building scalable REST API’s and Soap web services. Experience with open source frameworks/servers (Spring, Hibernate, Apache Tomcat). Experience with distributed computing (understand implications of CAP theorem, master election, brain split problem) and/or distributed DB/KVP (Cassandra, MongoDB, RedShift, Vertica etc) Hands on experience with relational SQL (including window functions, recursion, etc.) and no-SQL technologies.