InfoSec Engineer

About PhonePe Group:

PhonePe is Indias leading digital payments company with 50 crore (500 Million) registered users and 3.7 crore (37 Million) merchants covering over 99% of the postal codes across India. On the back of its leadership in digital payments PhonePe has expanded into financial services (Insurance Mutual Funds Stock Broking and Lending) as well as adjacent tech-enabled businesses such as Pincode for hyperlocal shopping and Indus App Store which is Indias first localized App Store. The PhonePe Group is a portfolio of businesses aligned with the companys vision to offer every Indian an equal opportunity to accelerate their progress by unlocking the flow of money and access to services.

Culture

At PhonePe we take extra care to make sure you give your best at work Everyday! And creating the right environment for you is just one of the things we do. We empower people and trust them to do the right thing. Here you own your work from start to finish right from day one. Being enthusiastic about tech is a big part of being at PhonePe. If you like building technology that impacts millions ideating with some of the best minds in the country and executing on your dreams with purpose and speed join us!

Information Security Engineer

Objectives of this Role:
Drive secure system configuration standards (E.g. CIS Benchmarks) implementationand vulnerability management efforts across the enterprise. Primarily in Linuxenvironments
Evaluate and drive implementation of new Information security processes tools andtechnologies
Own the implemented solutions end-to-end right from inception to deployment andmonitoring to regular upkeep
Liaise with cross functional teams to increase adoption of Information securitystandards
Provide security event correlation use cases and logic to generate SIEM alerts
Follow-up and close Information Security incidents/exceptions
Measure and increase efficacy of Information Security initiatives
Bring a DevSecOps mindset to implementations

Skills and Qualifications
3 years experience in Information security operations in a Linux heavyenvironment
Experience with IDS/IPS systems like OSSEC Wazhu Suricata Snort etc.
Experience with Elastic and Kibana
Experience with Vulnerability and Configuration Assessment and Managementstandards tools/technologies like CIS Benchmarks CVE OVAL OpenVAS NessusQualys etc.
Experience with opensource Identity Management with products like ApacheSyncope OpenIAM Gluu etc.
Hands-on experience with common Security tools in Linux
Experience with SaltStack (or any other Infrastructure as code tools)
Proficient in at least two of these languages: Python/Go/Java/Perl
Good in basic data structures/algorithms
Hands on experience on web scale production setup
Awareness of cloud technologies networking fundamentals Mesos KVM/QEMUNodeJS/React will be good to have
Ability to manage small teams

PhonePe Full Time Employee Benefits (Not applicable for Intern or Contract Roles)

• Insurance Benefits - Medical Insurance Critical Illness Insurance Accidental Insurance Life Insurance
• Wellness Program - Employee Assistance Program Onsite Medical Center Emergency Support System
• Parental Support - Maternity Benefit Paternity Benefit Program Adoption Assistance Program Day-care Support Program
• Mobility Benefits - Relocation benefits Transfer Support Policy Travel Policy
• Retirement Benefits - Employee PF Contribution Flexible PF Contribution Gratuity NPS Leave Encashment
• Other Benefits - Higher Education Assistance Car Lease Salary Advance Policy

Working at PhonePe is a rewarding experience! Great people a work environment that thrives on creativity the opportunity to take on roles beyond a defined job description are just some of the reasons you should work with us. Read more about PhonePe on our blog.

Life at PhonePe

PhonePe in the news