Lead Security Engineer

We are looking for a Security Engineer with strong hands-on expertise to drive global security initiatives across applications, networks, and databases. The role focuses on security assessment, risk management, compliance, and secure technology adoption, requiring close collaboration with cross-functional and business teams.Responsibilities:Drive database security agendas at the global perspectiveTesting new applications and doing a Security AnalysisSupporting, auditing and designing security solutions that support global and domestic clientsSupporting Firewall, VPN, Intrusion Detection, Web filtering, Antivirus day to day activitiesDeveloping security requirements for new technology projects and changes to current environments and applicationsMonitoring networks and computing resources for proper security procedures and signs of compromiseEngage with virtual cross-tower teams in strategic initiativesInfluence and communicate across the organizationEngage with lines of businesses, so a strong mix of hard and soft skills is essentialAssess network infrastructure and systems and network for security complianceEstablish clear governance and approval mechanisms for AI tools and integrations, evaluating risks related to data privacy, cyber threats, accuracy, bias, and compliance.Ensure compliance with relevant regulations and align technology risk management strategies with frameworks such as NIST, ISO 27001, and MITRE ATT&CK.

Hands-on experience with secure software development practices, security testing methodologies, and risk assessment within agile SDLC environments. Good understanding of OWASP Top 10 , SANS Top 25, OSSTMM, PTES, NIST standards. Expertise and practical hands-on top industry Application Security testing tools like HCL AppScan, Checkmarx, Veracode, Burp Suite. Having certifications like OSCP, OSWE, CEH are a plus. Good conceptual knowledge and practical hands-on on SAST, DAST, IAST, SCA and other type of testing relevant in software development. Must have strong foundation of how application works and developed.Certifications for Lead Security Engineer: CISM/ ITIL /CISCO/RedHat/ Oracle/ Juniper/CheckpointWorking knowledge of database security concepts.Experience in IT end-to-end problem management and root cause analysis.Understanding of legal and regulatory requirements related to the privacy of employee and customer personal data.Strong knowledge of HTTP and multiple communication protocols, along with common approaches to address their security challenges.