As an Associate Security Engineer at UXCam, you will collaborate closely with our DevOps, Engineering and Compliance teams to design, implement and maintain security protocols for our cloud infrastructure and mobile analytics product. Your primary focus will be on securing our microservices architecture on AWS, conducting vulnerability assessments, and ensuring the security of our Android and iOS SDKs. You'll also help maintain our bug bounty program and vulnerability management processes while working with teams to continuously enhance the security posture of our SaaS product, trusted by thousands of customers globally.

• Conduct regular penetration tests, and code and configuration reviews on web, mobile and cloud assets to identify vulnerabilities, and collaborate with external vendors as needed.

• Collaborate with other security engineers to manage our bug bounty program.

• Monitor and respond to security events and alerts from EDR, SIEM and other security tools.

• Implement and optimize automated security processes across the SDLC to identify and address vulnerabilities early.

• Develop and maintain custom security tools and scripts to automate and enhance security processes.

• Support SOC 2 and other security audits by maintaining documentation and ensuring security controls meet compliance standards.

• Assist in internal security training by providing secure coding sessions for the engineering team and running company-wide security awareness and phishing simulation exercises to build a security-first culture.

• Create, maintain and update security documentation, which includes incident response runbooks, internal guides, best practice documents and procedures.

• Stay current on emerging security technologies and threats, industry trends and regulatory changes to continually improve security strategies.

• 1+ years of experience in technical security roles (e.g. security engineering, DevSecOps, or related areas) within an enterprise environment.

• Thorough understanding of common classes of security vulnerabilities (OWASP Top 10) and general mitigation strategies.

• Technical Skills

  • Good level of scripting/programming experience, particularly using languages such as Python, Bash or Go.

  • Comfortable with command-line environments, especially on Linux/macOS systems.

  • Exposure to containerization technologies like Docker and Kubernetes.

  • Foundational understanding of cloud concepts and cloud security (preferably AWS).

  • Familiarity with vulnerability assessment tools and techniques; hands-on experience with VAPT is a plus.

• Strong technical documentation and research skills.

• Strong problem-solving skills with a proactive, ownership-driven mindset.

• Excellent verbal and written communication skills for effective collaboration with cross-functional teams.

• A flat and dynamic organization;
• Work autonomy, meaningful challenges, and significant impact on the company culture;
• Global exposure with team members from all around the world;
• Open and friendly culture, flexible working conditions.
• Breakfast, Lunch, snacks at office
• Attractive Salary
• PF, Gratuity, and Medical benefits
• Solid yet flexible career plan structure