Job Description

Product Security EngineerDepartment: Global Analytics and TechnologyEmployment Type: Permanent - Full TimeLocation: IndiaDescriptionJob location: Remote in IndiaThe team you would join:
The Global Analytics and Technology function builds technology-enabled solutions to support Sun King\'s pay-as-you-go (PAYG) solar business, based on data driven insights.Through the EasyBuy PAYG solar business model, customers can purchase a Sun King solar home solution by making a small down-payment up front and paying the remaining balance through a series of installments over a pre-agreed period of time. This unique consumer financing technology makes renewable, solar home energy solutions affordable and accessible to nearly one billion people around the world that currently lack reliable, affordable access to energy through the traditional electric grid. Sun King represents 38% of the global PAYG solar industry, and in the last decade, Sun King solutions have already enabled more than 80 million people to access renewable energy.Our team of data scientists, data engineers, analysts, technical architects, android developers, web designers, backend engineers, product managers and UI/UX developers design and develop cutting edge solutions to solve complex business challenges inherent to serving off-grid and under-electrified customers, including: last mile, often rural, product delivery; credit underwriting for under-banked consumers; credit risk management; distribution channel digitization; sales agent churn management; etc.About the role:
In this role, your principal mission will be to drive security-related engineering engagement and technical remediation across Sun King product lines. Deal into application security, architecture reviews, and cloud security to scale security engagement across Engineering. As a Product Security engineer, you will leverage your software engineering skills and security expertise to raise the security bar across our infrastructure, mobile services, and web apps.What you would be expected to do:

• Perform Code reviews, DevSecOps, and Architecture Design reviews.
• Perform Application security reviews like Penetration testing and code reviews on Mobile applications, APIs, and web applications using OWASP standards.
• Identify security loopholes in the product design by performing threat modelling.
• Proficient in identifying vulnerabilities, guiding remediation steps and tracking the timely closure of issues based on severity.
• Deploy and manage security tools integration into CI/CD pipeline.
• Perform SAST, DAST, and SCA scans using in-house preferred tools, review the scan results for false positives and deliver them to engineering teams.
• Lead product security efforts during security incident management and define post-incident product security remediation plans.
• Set up automated processes to monitor applications and systems for unusual activities (e.g unauthorised access, modification, duplication or destruction of information)
• Keep abreast of the latest security vulnerabilities and security trends.

You might be a strong candidate if you have/are:

• At least 3 years of experience in the Application security domain.
• Hold any security certification such as OSCP, OSWE, GPEN, GWAPT, CRTP, etc
• Experience with web application scanning tools, including Qualys WAS, Appspider, Acutenitx, Veracode, Burp Suite, Netsparker, OWASP Zap, Checkmarx, Whitesource, Snyk or similar.
• Good knowledge in secure protocols, encryption standards, authentication mechanisms, etc
• Outstanding communication and interpersonal skills, with the ability to engage effectively with diverse stakeholders.

What Sun King offers:

• Professional growth in a dynamic, rapidly expanding, high-social-impact industry
• An open-minded, collaborative culture made up of enthusiastic colleagues who are driven by the challenge of innovation towards profound impact on people and the planet.
• A truly multicultural experience: you will have the chance to work with and learn from people from different geographies, nationalities, and backgrounds.
• Structured, tailored learning and development programs that help you become a better leader, manager, and professional through the Sun King Center for Leadership.

Sun King