Cyber Security Engineer

Total Experience - 5 Yrs and above

Notice Period - Immediate - 15 Days

Location - Bangalore

Requirements for the candidate

• Security Strategy & Roadmap
  Owns the end-to-end security capability roadmap — covering vulnerability classes, detection methods, and verification techniques — and continuously reviews the competitive landscape across both commercial and open source security tools to keep the product's approach current.
  Selects and embeds the security testing frameworks and methodologies the product aligns to, tracking emerging attack classes and testing techniques and deciding when and how they should be incorporated into the product.
  Owns the product's overall security thesis and represents it externally to stakeholders, customers, and the wider community, while also setting the security requirements for the harness itself.

  Detection Quality & Measurement
  Owns detection quality across all specialist analysis lenses, ensuring consistency and reliability of results.
  Designs and curates the benchmark corpus — a structured set of seeded and labelled vulnerabilities used to validate detection performance.
  Owns the measurement methodology and safeguards the integrity of all published detection figures.
  Adjudicates whether findings are genuine, setting and maintaining the triage standard used across the team.
  Runs the standing evaluation program benchmarking competing tools and techniques against the corpus.
  Reviews external contributions and changes to the harness for potential security impact before they're merged.

  Hands-On Execution & Support

Essential functions

Builds and maintains seeded vulnerability test cases across all supported programming languages.
Runs benchmark passes with every release, recording results against the established baseline.
Performs scanning and first-pass triage of findings, escalating ambiguous or unclear cases for senior review.
Reproduces reported detection failures and documents them with a minimal, reproducible test case.
Maintains vulnerability classification mappings and per-language coverage tables to track detection completeness.
Continuously grows the regression corpus based on validated findings.
Handles first-line community reports of false positives and missed detections, ensuring timely triage and response.

Qualifications

Vulnerability classes & detection methods, security testing frameworks/methodologies, benchmark corpus design (seeded/labelled vulnerabilities), detection measurement & metrics integrity, findings triage/adjudication, competitive tool evaluation, secure code review, multi-language vulnerability test case authoring, vulnerability classification mapping (np. CWE/OWASP), regression corpus management, false positive/negative handling.

We offer

• Opportunity to work on bleeding-edge projects
• Work with a highly motivated and dedicated team
• Competitive salary
• Flexible schedule
• Benefits package - medical insurance, sports
• Corporate social events
• Professional development opportunities
• Well-equipped office

About us

Grid Dynamics (NASDAQ: GDYN) is a leading provider of technology consulting, platform and product engineering, AI, and advanced analytics services. Fusing technical vision with business acumen, we solve the most pressing technical challenges and enable positive business outcomes for enterprise companies undergoing business transformation. A key differentiator for Grid Dynamics is our 8 years of experience and leadership in enterprise AI, supported by profound expertise and ongoing investment in data, analytics, cloud & DevOps, application modernization and customer experience. Founded in 2006, Grid Dynamics is headquartered in Silicon Valley with offices across the Americas, Europe, and India.