JD : Engineer II, Security Engineering

Location : Bangalore, India

About Circles

Founded in 2014, Circles is a global technology company that’s reimagining the telco industry with its SaaS platform, Circles X, and helping operators launch and operate successful brands.

Today, Circles is partnering operators in 13 countries to deliver delightful digital experiences to millions of people through our businesses.

With Circles.Life, our digital lifestyle brand, we empower and delight customers across the world by offering digital experiences that go beyond traditional telco services.

With Circles X, our digital telco technology empowers operators to launch digital telco brands from anywhere in the world. Built for operators by an operator, Circles X powers both Circles.Life and our partner operators’ digital telco brands.

Circles is backed by global investors such as Sequoia, Warburg Pincus, EDBI and Founders Fund – renowned institutions with a track record of backing industry-shaking innovators.

About This Role

As a Engineer II, Security Engineer, you will be given a unique opportunity to solve security challenges in our Cloud environments and work on high impact projects.

As a subject matter expert for security engineering, you will be responsible for:

• Lead the efforts and projects to ensure Security in the code and infrastructure in accordance to the definitions of the shared service model;
• Implement secure by design principles in the S-SDLC
• Building partnership with internal stakeholders to draw out security standards for SAST, SCA, DAST, Container images 
• Conduct security due diligence of the new solutions and features planned to be introduced in the product
• Conduct penetration testing of the application to identify security gaps and drive remediation with engineering teams
• Drive standardization of best practices across all aspects of SDLC and Cloud Security
• Advise engineering teams on application and infrastructure design to ensure security is embedded throughout the lifecycle
• Review and configure Web Application Firewalls(WAF) to protect against emerging threats
• Identify potential gaps in existing environments, areas to improve our security posture by comparing against the baseline security standards
• Identify and prioritize critical audit logs based on the organization's infrastructure, applications, and security requirements;

 

What are we looking for?

• 2 to 4 years of security related experience.
• Proficient in any one programming language (e. g. Golang, Python, JavaScript, etc. )
• Passion for security, a practical and balanced approach to security issues
• Understand VMs, docker containers and their orchestration with its challenges (e. g. Kubernetes, Docker)
• Knowledge and understanding of OWASP Top 10 and knowledge of potential attack vectors such as XSS, injection, hijacking, social engineering, and so on Vulnerability scanning and patch management.
• Experience in doing security assessments on web applications, Android and iOS mobile applications in microservice architecture
• Experience in using security tools to conduct manual and automated security assessments
• Experience working with common product flows like payment gateway integration, authentication etc.
• Sound understanding of security related to AWS, GCP and Kubernetes.
• Understanding of Web Application Firewall.
• Sound understanding of Database security.
• Knowledge and deep understanding of security engineering best practices.
• Knowledge of networking protocols, such as TCP/IP, and http/https.
• Critical thinker, good communicator and problem-solving skills.

To all recruitment agencies: Circles will only acknowledge resumes shared by recruitment agencies if selected in our preferred supplier partnership program. Please do not forward resumes to our jobs alias, Circles.Life employees or any other company location. Circles will not be held accountable for any fees related to unsolicited resumes not uploaded via our ATS.

Circles is committed to a diverse and inclusive workplace. We are an equal opportunity employer and do not discriminate on the basis of race, national origin, gender, disability or age.