11+ Penetration testing Jobs in Pune | Penetration testing Job openings in Pune

PortOne is re−imagining payments in Korea and other international markets. We are a Series B funded startup backed by prominent VC firms Softbank and Hanwa Capital

https://portone.io/global/en

PortOne provides a unified API for merchants to integrate with and manage all of the payment options available in Korea and SEA Markets - Thailand, Singapore, Indonesia etc. It's currently used by 2000+ companies and processing multi-billion dollars in annualized volume. We are building a team to take this product to international markets, and looking for engineers with a passion for fintech and digital payments.

Culture and Values at PortOne

• You will be joining a team that stands for Making a difference.
• You will be joining a culture that identifies more with Sports Teams rather than a 9 to 5 workplace.
• This will be remote role that allows you flexibility to save time on commute
• Your will have peers who are/have
• Highly Self Driven with A sense of purpose
• High Energy Levels - Building stuff is your sport
• Ownership - Solve customer problems end to end - Customer is your Boss
• Hunger to learn - Highly motivated to keep developing new tech skill sets

Who you are ?

* You are an athlete and Devops/DevSecOps is your sport.

* Your passion drives you to learn and build stuff and not because your manager tells you to.

* Your work ethic is that of an athlete preparing for your next marathon. Your sport drives you and you like being in the zone.

* You are NOT a clockwatcher renting out your time, and NOT have an attitude of "I will do only what is asked for"

* Enjoys solving problems and delight users both internally and externally

* Take pride in working on projects to successful completion involving a wide variety of technologies and systems

* Posses strong & effective communication skills and the ability to present complex ideas in a clear & concise way

* Responsible, self-directed, forward thinker, and operates with focus, discipline and minimal supervision

* A team player with a strong work ethic

Experience

* 2+ year of experience working as a Devops/DevSecOps Engineer

* BE in Computer Science or equivalent combination of technical education and work experience

* Must have actively managed infrastructure components & devops for high quality and high scale products

* Proficient knowledge and experience on infra concepts - Networking/Load Balancing/High Availability

* Experience on designing and configuring infra in cloud service providers - AWS / GCP / AZURE

* Knowledge on Secure Infrastructure practices and designs

* Experience with DevOps, DevSecOps, Release Engineering, and Automation

* Experience with Agile development incorporating TDD / CI / CD practices

Hands on Skills

* Proficient in atleast one high level Programming Language: Go / Java / C

* Proficient in scripting - bash scripting etc - to build/glue together devops/datapipeline workflows

* Proficient in Cloud Services - AWS / GCP / AZURE

* Hands on experience on CI/CD & relevant tools - Jenkins / Travis / Gitops / SonarQube / JUnit / Mock frameworks

* Hands on experience on Kubenetes ecosystem & container based deployments - Kubernetes / Docker / Helm Charts / Vault / Packer / lstio / Flyway

* Hands on experience on Infra as code frameworks - Terraform / Crossplane / Ansible

* Version Control & Code Quality: Git / Github / Bitbucket / SonarQube

* Experience on Monitoring Tools: Elasticsearch / Logstash / Kibana / Prometheus / Grafana / Datadog / Nagios

* Experience with RDBMS Databases & Caching services: Postgres / MySql / Redis / CDN

* Experience with Data Pipelines/Worflow tools: Airflow / Kafka / Flink / Pub-Sub

* DevSecOps - Cloud Security Assessment, Best Practices & Automation

* DevSecOps - Vulnerabiltiy Assessments/Penetration Testing for Web, Network and Mobile applications

* Preferrable to have Devops/Infra Experience for products in Payments/Fintech domain - Payment Gateways/Bank integrations etc

What will you do ?

Devops

* Provisioning the infrastructure using Crossplane/Terraform/Cloudformation scripts.

* Creating and Managing the AWS EC2, RDS, EKS, S3, VPC, KMS and IAM services, EKS clusters & RDS Databases.

* Monitor the infra to prevent outages/downtimes and honor our infra SLAs

* Deploy and manage new infra components.

* Update and Migrate the clusters and services.

* Reducing the cloud cost by enabling/scheduling for less utilized instances.

* Collaborate with stakeholders across the organization such as experts in - product, design, engineering

* Uphold best practices in Devops/DevSecOps and Infra management with attention to security best practices

DevSecOps

* Cloud Security Assessment & Automation

* Modify existing infra to adhere to security best practices

* Perform Threat Modelling of Web/Mobile applications

* Integrate security testing tools (SAST, DAST) in to CI/CD pipelines

* Incident management and remediation - Monitoring security incidents, recovery from and remediation of the issues

* Perform frequent Vulnerabiltiy Assessments/Penetration Testing for Web, Network and Mobile applications

* Ensure the environment is compliant to CIS, NIST, PCI etc.

Here are examples of apps/features you will be supporting as a Devops/DevSecOps Engineer

* Intuitive, easy-to-use APIs for payment process.

* Integrations with local payment gateways in international markets.

* Dashboard to manage gateways and transactions.

* Analytics platform to provide insights

• Configure, optimize, document, and support of the infrastructure components of software products (which are hosted in collocated facilities and cloud services such as AWS)
• Design and build tools and frameworks that support deployment and management and platforms
• Design, build, and deliver cloud computing solutions, hosted services, and underlying software infrastructures
• Build core functionality of our cloud-based platform product, deliver secure, reliable services and construct third party integrations
• Assist in coaching application developers on proper DevOps techniques for building scalable applications in the microservices paradigm
• Foster collaboration with software product development and architecture teams to ensure releases are delivered with repeatable and auditable processes
• Support and troubleshoot scalability, high availability, performance, monitoring, backup, and restores of different environments
• Work independently across multiple platforms and applications to understand dependencies
• Evaluate new tools, technologies, and processes to improve speed, efficiency, and scalability of continuous integration environments
• Design and architect solutions for existing client-facing applications as they are moved into cloud environments such as AWS
• Competencies
• Full understanding of scripting and automated process management in languages such as Shell, Ruby and/ or Python
• Working Knowledge SCM tools such as Git, GitHub, Bitbucket, etc.
• Working knowledge of Amazon Web Services and related APIs
• Ability to deliver and manage web or cloud-based services
• General familiarity with monitoring tools
• General familiarity with configuration/provisioning tools such as Terraform
• Experience
• Experience working within an Agile type environment
• 4+ years of experience with cloud-based provisioning (Azure, AWS, Google), monitoring, troubleshooting, and related DevOps technologies
• 4+ years of experience with containerization/orchestration technologies like Rancher, Docker and Kubernetes

Position: SDE-1 DevSecOps

Location: Pune, India

Experience Required: 0+ Years

We are looking for a DevSecOps engineer to contribute to product development, mentor team members, and devise creative solutions for customer needs. We value effective communication in person, in documentation, and in code. Ideal candidates thrive in small, collaborative teams, love making an impact, and take pride in their work with a product-focused, self-driven approach. If you're passionate about integrating security and deployment seamlessly into the development process, we want you on our team.

About FlytBase

FlytBase is a global leader in enterprise drone software automation. FlytBase platform is enabling drone-in-a-box deployments all across the globe and has the largest network of partners in 50+ countries.

The team comprises young engineers and designers from top-tier universities such as IIT-B, IIT-KGP, University of Maryland, Georgia Tech, COEP, SRM, KIIT and with deep expertise in drone technology, computer science, electronics, aerospace, and robotics.

The company is headquartered in Silicon Valley, California, USA, and has R&D offices in Pune, India. Widely recognized as a pioneer in the commercial drone ecosystem, FlytBase continues to win awards globally - FlytBase was the Global Grand Champion at the ‘NTT Data Open Innovation Contest’ held in Tokyo, Japan, and was the recipient of ‘ TiE50 Award’ at TiE Silicon Valley.

Role and Responsibilities:

• Participate in the creation and maintenance of CI/CD solutions and pipelines.
• Leverage Linux and shell scripting for automating security and system updates, and design secure architectures using AWS services (VPC, EC2, S3, IAM, EKS/Kubernetes) to enhance application deployment and management.
• Build and maintain secure Docker containers, manage orchestration using Kubernetes, and automate configuration management with tools like Ansible and Chef, ensuring compliance with security standards.
• Implement and manage infrastructure using Terraform, aligning with security and compliance requirements, and set up Dynatrace for advanced monitoring, alerting, and visualization of security metrics. Develop Terraform scripts to automate and optimize infrastructure provisioning and management tasks.
• Utilize Git for secure source code management and integrate continuous security practices into CI/CD pipelines, applying vulnerability scanning and automated security testing tools.
• Contribute to security assessments, including vulnerability and penetration testing, NIST, CIS AWS, NIS2 etc.
• Implement and oversee compliance processes for SOC II, ISO27001, and GDPR.
• Stay updated on cybersecurity trends and best practices, including knowledge of SAST and DAST tools, OWASP Top10.
• Automate routine tasks and create tools to improve team efficiency and system robustness.
• Contribute to disaster recovery plans and ensure robust backup systems are in place.
• Develop and enforce security policies and respond effectively to security incidents.
• Manage incident response protocols, including on-call rotations and strategic planning.
• Conduct post-incident reviews to prevent recurrence and refine the system reliability framework.
• Implementing Service Level Indicators (SLIs) and maintaining Service Level Objectives (SLOs) and Service Level Agreements (SLAs) to ensure high standards of service delivery and reliability.

Best suited for candidates who: (Skills/Experience)

• Up to 4 years of experience in a related field, with a strong emphasis on learning and execution.
• Background in IT or computer science.
• Familiarity with CI/CD tools, cloud platforms (AWS, Azure, or GCP), and programming languages like Python, JavaScript, or Ruby.
• Solid understanding of network layers and TCP/IP protocols.
• In-depth understanding of operating systems, networking, and cloud services.
• Strong problem-solving skills with a 'hacker' mindset.
• Knowledge of security principles, threat modeling, risk assessment, and vulnerability management is a plus. 
• Relevant certifications (e.g., CISSP, GWAPT, OSCP) are a plus.

Compensation: 

This role comes with an annual CTC that is market competitive and depends on the quality of your work experience, degree of professionalism, culture fit, and alignment with FlytBase’s long-term business strategy.

Perks:

• Fast-paced Startup culture
• Hacker mode environment
• Enthusiastic and approachable team
• Professional autonomy
• Company-wide sense of purpose
• Flexible work hours
• Informal dress code

• Seeking an Individual carrying around 5+ yrs of experience.
• Must have skills - Jenkins, Groovy, Ansible, Shell Scripting, Python, Linux Admin
• Terraform, AWS deep knowledge to automate and provision EC2, EBS, SQL Server, cost optimization, CI/CD pipeline using Jenkins, Server less automation is plus.
• Excellent writing and communication skills in English. Enjoy writing crisp and understandable documentation
• Comfortable programming in one or more scripting languages
• Enjoys tinkering with tooling. Find easier ways to handle systems by doing some research. Strong awareness around build vs buy.

Role and responsibilities

• Expertise in AWS (Most typical Services),Docker & Kubernetes.
• Strong Scripting knowledge, Strong Devops Automation, Good at Linux
• Hands on with CI/CD (CircleCI preferred but any CI/CD tool will do). Strong Understanding of GitHub
• Strong understanding of AWS networking and. Strong with Security & Certificates.

Nice-to-have skills

• Involved in Product Engineering

DevOps 

Engineers : Min 3 to 5 Years 
Tech Leads : Min 6 to 10 Years 

• Implementing & supporting CI/CD/CT pipelines at scale.  
• Knowledge and experience using Chef, Puppet or Ansible automation to deploy and be able to manage Linux systems in production and CI environments.  
• Extensive experience with Shell scripts (bash).  
• Knowledge and practical experience of Jenkins for CI.  
• Experienced in build & release management.  
• Experience of deploying JVM based applications.  
• Enterprise AWS deployment with sound knowledge on AWS & AWS security.  
• Knowledge of encryption technologies: IPSec, SSL, SSH. 
• Minimum of 2 years of experience as a Linux Systems Engineer (CentOS/Red Hat) ideally supporting a highly-available, 24x7 production environments. 
• DNS providing and maintenance.  
• Helpful skills: Knowledge of applications relying on Maven, Ant, Gradle, Spring Boot.  
• Knowledge of app and server monitoring tools such as ELK/AppEngine. 
• Excellent written, oral communication and interpersonal skills. 

Job Description:

Mandatory Skills:

Should have strong working experience with Cloud technologies like AWS and Azure.

Should have strong working experience with CI/CD tools like Jenkins and Rundeck.

Must have experience with configuration management tools like Ansible.

Must have working knowledge on tools like Terraform.

Must be good at Scripting Languages like shell scripting and python.

Should be expertise in DevOps practices and should have demonstrated the ability to apply that knowledge across diverse projects and teams.

Preferable skills:

Experience with tools like Docker, Kubernetes, Puppet, JIRA, gitlab and Jfrog.

Experience in scripting languages like groovy.

Experience with GCP

Summary & Responsibilities:

 Write build pipelines and IaaC (ARM templates, terraform or cloud formation).

 Develop ansible playbooks to install and configure various products.

 Implement Jenkins and Rundeck jobs( and pipelines).

 Must be a self-starter and be able to work well in a fast paced, dynamic environment

 Work independently and resolve issues with minimal supervision.

 Strong desire to learn new technologies and techniques

 Strong communication (written / verbal ) skills

Qualification:

Bachelor's degree in Computer Science or equivalent.

4+ years of experience in DevOps and AWS.

2+ years of experience in Python, Shell scripting and Azure.

• JD: • 10+ years of overall industry experience
  • 5+ years of cloud experience
  • 2+ years of architect experience
  • Varied background preferred between systems and development
  o Experience working with applications, not pure infra experience
  • Azure experience – strong background using Azure for application migrations
  • Terraform experience – should mention automation technologies in job experience
  • Hands on experience delivering in the cloud
  • Must have job experience designing solutions for customers
  • IaaS Cloud architect
  workload migrations to AWS and/or Azure
  • Security architecture considerations experience
  • CI/CD experience
  • Proven applications migration track of record.