Security Engineer

Job Description:

As a Secure SDLC Policy developer will play a critical role in establishing a comprehensive Secure Software Development Life Cycle (Secure SDLC) policy that can be implemented and leveraged across our entire organization.

Responsibilities: -

Someone who is knowledgeable on industry best practices for Secure SDLC policies.
Collaborate with security, development, and operations teams to understand specific needs and requirements.
Draft a clear, concise, and actionable Secure SDLC policy document.
Define roles and responsibilities for stakeholders involved in the Secure SDLC process.
Outline security practices to be integrated throughout the development lifecycle (requirements gathering, design, development, testing, deployment, and operations).
Ensure the policy aligns with industry standards and relevant regulations.
Develop training materials for employees on the Secure SDLC policy and best practices.
Maintain and update the Secure SDLC policy as needed based on evolving technologies and threats.

Educational Qualifications: -

Engineering Degree - BE/ME/BTech/MTech/BSc/MSc.
• Technical certification in multiple technologies is desirable.

Skills: -

Mandatory skills

Minimum 3+ years of experience in information security or a related field.
Strong understanding of Secure SDLC principles and best practices (e.g., OWASP Top 10, NIST SP 800-64).
Excellent writing and communication skills, with the ability to create clear and well-organized documentation.
Experience developing and implementing security policies.
Familiarity with various software development methodologies (e.g., Agile, Waterfall).
Ability to work independently and collaboratively within a team environment.
Excellent analytical and problem-solving skills.
Desired Skills: -

Expertise in cryptography and secure communication protocols
Experience with security tools.
Security Certification will be an added advantage