Scrum Master

About The Company -

OYO Hotels & Homes is the world’s third largest and fastest-growing chain of leased and franchised hotels, homes & spaces managing over 1 million exclusive rooms across 800 cities and 80 countries. OYO was founded on the mission that everyone deserves a quality living and working space and we are very passionate about this mission. Technology and Innovation plays a critical role in this mission and therefore today we employ World Class engineers, product managers and designers across core markets & geographies. If you are looking for a high pace environment, itching to create a large impact through technology impacting 100s of millions of customers across the globe, we love to hear from you.

Key Responsibilities:

• Conducting application(Web & Mobile) and infrastructure penetration testing assessments.
• Deploy, improve and utilize SAST/DAST/SCA and other cybersecurity solutions to detect & prevent security vulnerabilities.
• Work closely with the business, product and Development/engineering teams to provide input and guidance on developing secure products and help teams adopt shift-security-to-left practices.
• Work closely with the DevOps team to secure the cloud environment.
• Developing and maintaining cybersecurity process activities including security requirements engineering, threat modelling, code reviews and cyber risk assessment.
• Improve and automate cybersecurity processes within the CI/CD pipelines.
• Continuously review and identify security improvement opportunities in existing products, processes, services and workflows to ensure the people, products and technology in the organization are protected against current and future cybersecurity threats.
• Deliver awareness sessions on Secure Development to engineering/development teams
• Drive continuous improvement activities to define, measure, visualize and improve key cyber security metrics related to Application Security.
• Preparing and launching social engineering campaigns;

Key Skills:

• Expertise in application(Web & Mobile) and infrastructure penetration testing.
• Strong experience with Azure or AWS cloud environments and its security controls.
• Experience with microservices architectures & distributed Platforms
• Strong experience with using Agile software development and securing CI/CD pipeline.
• Coding Experience in Scripting & programming languages (such as Terraform, Java, Python, Ruby, etc.)
• Knowledge of how modern web & mobile apps are designed, developed and deployed across different platforms;
• Knowledge of common exploitation techniques and mitigations.
• Experience in implementing and managing a vulnerability management program (process and technology).
• Experience and knowledge of implementing a DevSecOps ecosystem and strong understanding of Dynamic and Static Application Security Testing (DAST & SAST).
• Understanding of the main cybersecurity tools (SIEM, IPS, XDR, etc.).
• Strong understanding of OWASP, PTES and other penetration testing methodologies.
• Understanding of global security frameworks and standards like NIST, ISO 27001, GDPR, PCI etc.
• Strong knowledge in preparing and launching social engineering campaigns.
• Ability to program or script in your preferred language
• Good understanding of network and OS principles
• Strong written and spoken English skills and ability to write high-quality reports
• An Information Security qualification e.g CSSLP, CEH, OSCP, or similar certification

Cultural Traits common to all OYO Leaders -

● Dealing with Ambiguity and Adaptability – we are a large, but fast-growing company today with not enough existing process or rules of engagements; and environment changes rapidly due to new businesses, geographies and strategic partnerships etc. You need to be able to create organization out of chaos, operate in an environment with minimal structure and adapt to change quickly while maintaining high velocity

● Ownership – anything between you and your job is also your job

● Bias for Action – speed matters a lot, so does quality. Ideal leader will be pragmatic, action-oriented and know the right balance between competing priorities

● Hunger to change the world – you need to be ambitious and willing to do more. If you believe you have already achieved your best and primarily looking to impart that vast knowledge, we aren’t the right place for you

Job Locations: We have a Pan India presence with Tech centers based out of Gurugram, Bangalore & Hyderabad. However currently we are working from our home.

What We’re Looking For