Senior Security Engineer - Application Security, Disney+ Hotstar

Key Responsibilities

• Work on new product features to make Hotstar users and data more secure by involving right from the walkthrough of the product features and practicing secure SDLC
• Think out of the box in building attack scenarios
• Come up with the threat landscape right from the inception of the idea to product solution to the architecture and implementation of the solution
• Proactively identify vulnerabilities across our platform and recommend fixes
• Ownership of the tasks
• Inclination towards learning multiple areas of security and build competency to deliver a wide spectrum of security like cloud security, operating systems etc.
• Adapt to technologies/languages/platforms/frameworks of the time
• Innovate to identify the security vulnerabilities as fast as possible in the lifecycle
• Promote the culture of security first at Hotstar
• Identifying the problem statements which upon solving will increase the security posture of Hotstar

Skills & Attributes for Success

• In-depth knowledge of security vulnerabilities not just limited to OWASP Top 10
• Experience in using the security tools to carry out the manual as well as automated security assessments
• Experience working with common product flows like payment gateway integration, authentication etc.
• Knowledge of how applications get built which may help in multiple scenarios to break the very things
• Passion for security, and a practical and balanced approach to security issues
• Ability to visualize the root cause and deep dive
• Experienced with securing AWS infrastructure managed and provisioned using IaC
• Extensive knowledge of security risks and mitigations through process and technology, especially for cloud-based applications and infrastructure
• Curiosity in knowing how things work in different conditions
• Independent, self-motivated and comfortable working in a fast-paced environment with teams ranging from product to engineering teams
• Contributions to the security community is a huge plus and shouldn’t be a tool junkie
• Lazy,so that could make machines work for him/her [automation]

Preferred Education & Experience

• Bachelor's Degree in Computer Science or related field with 4 to 6 years of experience in doing security assessments on web applications, Android and iOS mobile applications in microservice architecture