Our tech team is the core mobile-first cross-platform (desktop + mobile PWA, Android & iOS) fantasy product serving more than 10 crore users with over 75 million rpm (requests per minute) at peak concurrency.
Our tech stack is hosted on AWS and is built on Cloudfront / AWS API Gateway, NGINX, / Java, Redis / ElastiCache and MySQL / Cassandra as our end to end stack. Besides these, we heavily use MongoDB, Kinesis, Kafka, RabbitMQ, Spark, Redshift and other cutting edge techs to keep improving company's performance. As a data-driven team, we also use R, Python and other big data technologies for Machine Learning and Predictive Analytics.
Your Role :
- Working closely with development stakeholders to ensure secure design, development, and implementation of applications
- Understanding complex technical and architectural issues from the security perspective
- Understanding the implications associated with the chosen technical strategy and improvise them to meet security compliances
- Performing Application Vulnerability Assessment & Penetration Testing
- Writing in-house tools and automated scripts to enhance the security assessment
- Contributing to the delivery, automation, and maintenance of security policies, controls, and processes as part of the Application Risk Assessment team
Must Have :
- 5+ experience on Web and Mobile application Vulnerability Assessment & Penetration Testing
- Basic knowledge of Secure Code Review and Secure SDLC
- Good Understanding of any of the programming languages like Python, PHP, Java, Swift, GoLang, or NodeJS
- Basic understanding of Infrastructure/Network Vulnerability Assessment and Penetration Testing
Good to Have:
- Understanding of database technologies like MySQL, MongoDB, Redis, Cassandra etc.
- Knowledge of any cloud based platform like AWS, GCP etc.
- Worked on WAF and Log Analytics solutions
- Strong understanding of applications design and architecture
