Mobikwik - Associate Director - IT Security (8-13 yrs) Gurgaon/Gurugram (DevOps)

Mobikwik - Associate Director - IT Security (8-13 yrs) Gurgaon/Gurugram (DevOps)

Mobikwik - Associate Director - IT Security (8-13 yrs) Gurgaon/Gurugram (DevOps)

MobiKwik

Gurgaon, Haryana, India

About Mobikwik

MobiKwik is India's largest independent mobile payments network connecting 107 million users with more than 3 million direct merchants. It enables users to discover retailers (brick-and-mortar stores, e-com websites, m-com apps, billers, telcos) and then start paying them with 1-tap.

MobiKwik is powering payments for IRCTC, Uber, Meru Cabs, Shuttl, Big Bazaar, OYO Rooms, Zomato, Barista, PVR, Archies, WHSmith India, BookMyShow, Grofers, Big Basket, Domino's, Pizza Hut, eBay, ShopClues, Myntra, Jabong, Pepperfry, GoDaddy, MakeMyTrip, Cleartrip, and Yatra. The company has raised close to $30 million in funding till now from Sequoia Capital, American Express, Tree Line Asia, and Cisco Investments.

With MobiKwik, users load money into the wallet once using cash, loyalty points, debit card, credit card, and netbanking to make secure 1-tap payments for online or offline purchases.

Most MobiKwik users make 10-12 purchases every month using their wallet balance across diverse use cases such as recharge, bills, food, grocery, travel & cabs, shopping, entertainment, etc. Users can also make bank to bank transfers via UPI to friends and family using MobiKwik. Users today enjoy MobiKwik wallet services on Android, Windows, and iOS mobile applications and on MobiKwik.com.

About The Role

  • We are looking to hire Security professional who is passionate about security threats and vulnerabilities, understand how to break and defence the system from both the Application and network perspective.
  • Automate the security testing for Mobikwik and contribute to open source tools.
  • This is a Security QA role and you will be working alongside with Developers, QA & Security team. Perform analysis to identify vulnerabilities within an organization's security framework and IT/business assets.

What will you do as a part of the team:

  • Develop and maintain agile Security Best Practices and fine-tune various Web Application Firewalls
  • Analyse, fix, investigate security-related threats based on security platform reporting, network traffic, log files, host-based and automated security alerts
  • Design system security architecture and develop a detailed security design
  • Need to Create and execute annual operating plan for Security vertical
  • Developing process to sustain PCI-DSS & ISO 27001 certification
  • Work along with respective teams to implement PCI & ISO 27001 controls
  • Review compliance reports and works with teams to document deviations to compliance standards as needed
  • Ensure adherence to information security policies and standards
  • Assist in audit, policy management & incident management
  • Provide Incident Response (IR) support when analysis confirms actionable incident

Here's What We Are Looking For

  • At least 8+ years of experience in Security domain
  • Must have knowledge about authentication and security protocols, applied cryptography, Application and cloud Security
  • Should be fluent with either of scripting / programming language like Python / Java etc.
  • Understanding security fundamentals and common vulnerabilities
  • Deep understanding of Internet security issues and the threat landscape
  • Experience in implementing PCI-DSS & ISO 27001 Framework.
  • Expertise in network penetration testing
  • Experience in performing VAPT, Application Security Testing using Manual Techniques and - Automated tools with strong expertise in OWASP, SANS top 25
  • Strong investigative problem solving and decision making skills
  • Ability to handle highly confidential and sensitive information in strictly professional manner
  • Perform Root cause analysis of the data loss/leakage incident and recommend remediation plan
  • Ability to lead a highly motivated and innovated technical team

(ref:hirist.com)

  • Seniority level

    Director
  • Employment type

    Full-time
  • Job function

    Information Technology
  • Industries

    Information Technology and ServicesComputer SoftwareInternet