Senior Security Engineer

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with Major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 30+ incredibly passionate team working to make an impact and help some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited, and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end-to-end security audits, also researching new topics and vulnerabilities to be added to the scanner, present research at conferences.

What An Ideal Candidate Would Look Like: 

• Anyone pursuing their graduation or post-graduation related to IT security 
• Skills - Application Penetration Testing, 
• Knowledge or experience of IoT testing, and source code audits are plus points
• Responsibilities: Engage with clients for scoping call, perform security audits, and remediation call with clients to patch the issues

Minimum Requirements

• Must be comfortable with tools like burp suite, nmap, sqlmap, r2 etc
• Strong Analytical Skills
• Strong grasp of fundamentals of information security
• Strong Grasp of Web, API and mobile Pen-Testing
• Self-taught learner willing to read and keep up-to-date on technological changes and how they could be used
• Can accurately define an issue and create detailed Proof-of-concept and write-up of the findings.
• Provide appropriate remediation and mitigations of the identified vulnerabilities.
• Basic understanding of cloud platforms like AWS or GCP. Security knowledge in this domain is a plus.

Responsibilities

• Security assessment of web and mobile applications.
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and techniques

Personality traits we really admire

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humor, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process 

• Round 1 CTF Round - Profile and skill Evaluation
• Round 2 - Technical Interview with security team member
• Round 3 - Technical Interview with the Team Lead
• Round 4 - HR Round

 Why Join Us

• Great Stipend& PPO: We keep up with the market standards & provide stipend/pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also PPO for our top interns.
• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.

Designation – Technical Specialist L-2

Employment Type – Permanent

Education – Technical Graduate |Graduate / 12th+ Diploma.

Experience – 3 to 5 Years

Location – Bandra, Mumbai

Working – Monday to Friday

Joining – Immediately

Essential Duties and Responsibilities: (Additional duties may be assigned as required)

• Intermediate Troubleshooting of network-related incidents (link outages, peer outages, router/switch/firewall hardware failures, multicast and broadcast issues, network performance issues).
• Responsible for managing /configuring / Troubleshooting Proxy Overviewing Routing & Switching Responsible for managing /configuring / Troubleshooting Load Balancers/ Web Application Firewall, IPS/ IDS,
• Responsible for managing /configuring / Troubleshooting Proxy
• Ability to prepare SOP/HLD/LLD Documentation and Presentation.
• Work and resolve incidents with proper technical updates and artifacts Preparing a Plan of Action for Activities and New Implementations.
• Working closely with the customer IT team and collaborating with other IT staff Strict adherence to customer policies and processes Continuous guidance to the L1 team.

Required Skills: - Any 2 or more

• Proxy (Blue Coat/TrendMicro/Force point etc)
• IPS/ IDS, Proxy
• Network Devices (such as Web Proxy, micro-segmentation, DDos)
• Load Balancer (F5 / Netscaler / Array / Radware/Citrix etc)
• WAF (F5/ Netscaler / Radware/Citrix etc

Industry

• Human Resources

Employment Type

Full-time

About Us

We are an AI-Powered CX Cloud that enables enterprises to transform customer experience and boost revenue with our APIs by automating and analyzing customer interactions at scale. We assist across multiple voices and non-voice channels in 30+ languages whilst coaching and training agents with minimal costs.

The problem we are solving

In comparison to worldwide norms, customer support in traditional contact centers is quite appalling, due to a high number of queries, insufficient capacity of agents and inane customer support systems, businesses struggle with a multi-fold rise in customer discontent and bounce rate, resulting in connectivity failure points between them and customers.

To address this issue, IITian couple Manish and Rashi Gupta founded Rezo's AI-Powered CX Cloud for Enterprises 2018 to help businesses avoid customer churn and boost revenue without incurring financial costs by

providing 24x7 real-time responses to customer inquiries with minimal human interaction.

Roles and Responsibilities:-

• To Maintain the required uptime for Azure Cloud and IT Infrastructure.
• To provide the earliest resolution of the reported issues, which may include but are not limited to cloud & end-user related issues.
• Configuring and managing the alerts through Nagios, which may include but is not limited to scripting knowledge.
• Linux and Windows Server administration.
• Managing Firewalls and Domain Controllers.

Requirements

• Having relevant experience of 3+ yrs.
• Sound knowledge of Linux & Windows System administration
• Good Hands-on experience on Azure/AWS ( Willing to work on Azure only)
• Must be an expert in at least one of OpenStack, Cloudify, SaltStack, Rundeck, Ansible
• Good knowledge of networking, firewall & domain controller
• Basic knowledge of DevOps/Scripting
• Should be willing to work in rotational day shifts and WFO
• Flexibility to be able to work in a 24/7/7 environment

Life at Rezo.AI

• We take transparency very seriously. Along with a full view of team goals, get a top-level
• View across the board with our regular town hall meetings.
• A highly inclusive work culture that promotes a relaxed, creative, and productive
• environment.
• Practice autonomy, open communication, and growth opportunities, while maintaining a
• perfect work-life balance.
• Go on company-sponsored offsites, and blow off steam with your work buddies.

Perks & Benefits

Learning is a way of life. Unlock your full potential backed with cutting-edge tools and mentor-ship

Get the best in class medical insurance, programs for taking care of your mental health, and a Contemporary Leave Policy (beyond sick leaves)

Why Us?

We are a fast-paced start-up with some of the best talents from diverse backgrounds. Working together to solve customer service problems. We believe a diverse workforce is a powerful multiplier of innovation and growth, which is key to providing our clients with the best possible service and our employees with the best possible career. Diversity makes us smarter, more competitive, and more innovative.

Explore more here

http://www.rezo.ai/" target="_blank">www.rezo.ai

Please find the below skills which is required for L3 & Tech Lead Roll-

• Explanatory questions so as to evaluate English like 
• Production Issue analysis & their resolutions (mainly server-side issues)
• Involvement and Role in UAT & Production Deployments & upgrade activities.
• Work domain: BFSI/Telecom/Logistics/Aviation etc
• Linux/ Unix Experience
• Application Server- Tomcat/ Apache
• Web-Services - REST API, HTTP Methods, HTTP Error Codes
• Experience with Outages, Disaster Recovery, DC-DR
• Protocols- SSL, TLS, SSH, FTP
• Basic Networking- server connection, IP Address, Changing Ports, Deleting Logs,
• Exp on DNS, DHCP,
• Experience with a Load balancer
• The idea of Audit or Vulnerability assessment Report of the system
• Database or SQL concepts

Requirements

• 6-10 years of experience in technical customer support or network operations
• IP Networking basics: TCP/IP(ARP, IP, ICMP, TCP, UDP), Subnetting, IP Packet flow, OSI layers
• Routing technologies: OSPF, ISIS, BGP, MPLS (L2 & L3 VPN), RSVP, LDP, Multicast protocols (IGMP, PIM), Multicast VPN (MVPN)
• BNG protocols: PPPoE, DHCP, IPoE, L2TP
• Forwarding: Hierarchical QoS, uRPF, Firewalls, ACLs
• Switching and Data Center technologies: VLAN/Trunking, STP, RSTP, VSTP, VXLAN/EVPN, IP-Fabric as an added advantage
• Very Strong automation skills and experience with scripting languages like Python/Robot Framework
• Experience with traffic generators and network protocols analysis tools like IXIA, Spirent
• Any Open Source tools usage & certifications is an added advantage
• Knowledge of Linux, ONL infra and containers is an advantage

Responsibilities

• Proactively work with customers to enable them maximize usage of RtBrick products with least possible effort
• Understand customer usecases and help with qualification of RtBrick products & features
• Triage and resolve any issues customers face with products
• Work with engineering to resolve new defects
• Help engineering by collecting relevant information from live setup and reproduce the issue in LAB occasionally
• Understand in-house regression coverage and identify gaps in test case as per customer deployments
• Write and automate test cases related to customer usage and defect scenarios

An enthusiastic individual with the following skills. Please do not hesitate to apply if you do not match all of it. We are open to promising candidates who are passionate about their work and are team players.

• Must have strong experience in Information Security Management system(ISMS), creation of policy, procedures and implementation.
• Operates as a key contributor to the RFP, Third-Party Risk assessment, cloud security assessment etc.
• Lead the strategic and tactical development of information security framework, risk management and new compliance initiatives
• Subject matter expertise in ISO 27001, SOC2, CCPA, CPRA, GDPR, PCI DSS and HIPAA.
• Must have a strong experience in the documentation process and reviewing MSA, SCC, SLA & DPA.
• Good knowledge of BCP/DR, Incident response, VA/PT and Audit methodologies of various compliance frameworks.
• Good knowledge of Access management, Network, Application Security, Encryption, Backup, Physical Security, ISMS Training & Awareness etc..
• Ability to deal with the customers and vendors on Security and privacy matters.
• Knowledge of Core IT processes, SDLC, network infrastructure will be useful.

• Good written, oral, and interpersonal communication skills.
• Ability to conduct research into IT security issues
• Ability to present ideas in business-friendly and user-friendly language.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Highly self-motivated and hardworking.

• Bachelor’s/master's degree in Security, Computer Science, Management Information Systems, Engineering or related field.
• Should be at least ISO 27001 lead auditor or lead implementer. 
• 3+ years of related work experience in information security governance, risk and compliance (GRC) or relevant compliance roles in the SaaS industry.

A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain the quality of content, interact, and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the benefits of being at Xoxoday.

Xoxoday is a rapidly growing fintech SaaS firm that propels business growth while focusing on human motivation. Backed by Giift and Apis Partners Growth Fund II, Xoxoday offers a suite of three products - Plum, Empuls, and Compass. Xoxoday works with more than 2000 clients across 10+ countries and over 2.5 million users. Headquartered in Bengaluru, Xoxoday is a 300+ strong team with four global offices in San Francisco, Dublin, Singapore, New Delhi.

We look forward to connecting with you. As you may take time to review this opportunity, we will wait for a reasonable time of around 3-5 days before we screen the collected applications and start lining up job discussions with the hiring manager. We however assure you that we will attempt to maintain a reasonable time window for successfully closing this requirement. The candidates will be kept informed and updated on the feedback and application status.

Location : Mumbai

Big Picture (The Opportunity) :

Are you looking for an opportunity to advance your Career? & If you are able to maintain a positive attitude even when everything goes wrong, if you are detail oriented and self motivated with a passion to learn and improve your skills and knowledge, we have a perfect job for you !

What do we want from you ? (Our Expectations) :

• Zero to 2 years experience in Linux Operating System.
• Flexible working hours - able to support occasional nights, weekends, and call-ins, able to quickly adapt to a constantly changing faced paced environment. Open to travel to sites.
• An ideal person who is excited and motivated about running and supporting a production - grade critical infrastructure and looks for opportunities to improve processes with automation.

What are you required to do ? (Your Responsibilities) :

• Proactively maintain and develop all linux infrastructure technology to maintain a 24*7*365 uptime service.
• Engineering of systems administration-related various solutions for our various SAAS products and projects as well as operational needs.
• Proactively monitoring system performance and capacity planning.
• Providing technical support to customers for Applications, Operating systems, and networking.
• Will also be the first point of contact for our clients, where installations are placed on a permanent basis, for basic troubleshooting and problem solving.
• Fault finding, analysis and logging information for reporting of performance exceptions.
• Maintain best practices on managing systems and services across all environments.

Skills & Qualification Required (Add Value) :

• Graduate - Preferred to have Bachelor‘s Degree in Engineering, Computer Science or related field.
• He / She should be familiar with the installation and configuration of Linux operating systems and setup and operation of TCP/IP networking on Linux systems also familiar with Internet concepts including SMTP, IMAP, POP, HTTP, DNS, LDAP and related protocols.
• You should possess excellent communication skills .
• Knowledge of Email concepts, Helpdesk Concept , VoIP Concept , Cloud computing will be an added advantage.

Qualifications & Responsibilities

Year of Experience : 3- 8 yrs

Location : Bangalore, Delhi, Mumbai, Pune

Work on ISO 27001 & NIST based Information Security Management System implementation and sustenance.

-          Responsible for SOX (IT Security Controls) and track the monthly/quarterly/annual control reports and drive effectiveness of SOX controls.

-          Work on Business Continuity Planning, IT Disaster Recovery as per ISO27001 & NIST requirements

-          Assess information security posture, identify the gaps/risks in the existing environment and develop solutions to mitigate the identified gaps/risk

-          Conduct Information Systems audits covering IT infrastructure assets

-          Working knowledge in security domains such as: security governance policies and procedures, risk management, compliance, access control, network security, security architecture, security incident response, disaster recovery, business continuity management, privacy and data protection

-          Experience in leveraging industry standards and frameworks such as ISO/IEC 27001, NIST CSF/800-171, etc.

-          Possesses certifications such as ISO27001 LA. CISSP, CISA certification- preferred

Why NCG?

WHO WE ARE DRIVES WHAT WE DO!

We Don't build the organization; we create an everlasting family. Our people express a sense of winning together when times are good and sticking together when times are tough.

Are you a Doer or Achiever?

Well, at NCG, our doors are Open for Doers and Achievers alike. We are a Cult where we create, innovate, learn and Contribute in a comfortable, transparent, and fair environment.

Joining NCG means contributing to a shared ambition for reliable work culture, tackling extraordinary technological challenges in multicultural teams, preserving your work/life balance, and more!

REQUIRED CITIZENSHIP / WORK PERMIT / VISA STATUS:
Should be currently based in Japan with Valid work visa

MUST HAVES:

Experience Required:

• LAN/Wireless LAN based skills(over 3 years experiences)
• Firewall based skill (over 3 years experiences)
• Server based skill (over 3 years experiences)
• WAN/Internet based skills (over 3 years experiences)

*

• Required General Skills:

• Fluent in Japanese(both written & verbal) and English(reading & written)

Job role :

• · WAN, LAN, Wireless LAN, Firewall, ServerWork Contents;
• · Support Design and Implementation
• · Create documentation or basic design and detail design
• · Join required meeting(Internal, External)
• · Management Change(Create and close change record)
• · Test(Unit, Integrated) in on-site
• · Create the result of test document
• · Create change procedure
• · Installation equipment in on- site
• · Support soft MACD from remote site
• · Create operation manual
• · Support problem management
• · Support inventory management
• · Support configuration hencmanagement
• · Support reporting
• · Cisco Router/Switch/FW (MPLS, BGP, OSPF, STP, VLAN, QoS, VRF)
• · Juniper Router/Switch(SRX/EX/QFX)
• · Server (Linux,)
• · Wireless (CAPWAN)