Associate InfoSec Engineer

• *Associate Information Security Engineer****Company:** Reward360 Global Services Private Limited
• *Location:** **Bengaluru, Karnataka, India**
• *Experience:** **1–2 years****Department:** Information Security / Engineering

• *Job Overview**As an **Associate Information Security Engineer** at Reward360, you will be a vital part of our offensive and defensive security operations. You will focus on simulating real\-world cyberattacks, identifying vulnerabilities within our core loyalty platforms, and collaborating directly with development teams to ensure a resilient infrastructure. This is an ideal role for an ambitious professional looking to bridge the gap between application security, cloud penetration testing, and secure code review.

• *Key Responsibilities:*** **Offensive Security \& Pentesting:** Conduct **White\-Box and Grey\-Box penetration testing** across internally developed web applications, microservices, APIs, and cloud infrastructure with AI approach.
• **Vulnerability Assessment:** Utilize manual exploitation techniques alongside automated tooling to detect flaws, API security gaps, and misconfigurations before they reach production.
• **Secure Code Review:** Analyze source code manually and leverage
• **SAST/DAST utilities** to identify logical, cryptographic, and injection vulnerabilities.
• **Remediation \& Mitigation:** Collaborate with product managers and product development software engineers to provide actionable triage, remediation guidance, and verification re\-testing.
• **CI/CD Integration:** Assist in scaling security controls and guardrails by promoting automated security checks within the active DevOps pipelines.
• **Threat Modeling:** Assist with early\-lifecycle threat modeling to architect secure and low\-risk software deployments.Followed by STRIDE,PASTA,and MAESTRO,

• *Required Skills \& Experience:*** **Technical Capabilities \& Frameworks**

+ Comprehensive understanding of web and API security standards, specifically the **OWASP Top 10** and OWASP API Security methodologies.

+ Practical familiarity with foundational penetration testing frameworks such as **PTES, OSSTMM, or NIST**.

+ Exposure to cloud computing security fundamentals, with a strong emphasis on **Amazon Web Services (AWS)** environments.

Hands\-on knowledge in EKS and ECS Security

+

• **Security Infrastructure \& Tooling**

+ Hands\-on familiarity with penetration testing operating systems like **Kali Linux** or **Parrot OS**.

+ Everyday capability with interception proxies and security scanners, including **Burp Suite, Caido, Nessus**

+ Ability to script basic automation utilities using programming languages like **Python or JavaScript**.

• **Education \& Certifications (Preferred)**

+ **Education:** B.E. / B.Tech / BCA / M.Tech in Computer Science, Information Security, or a related field.

+ **Certifications (Good to have):** CEH (Certified Ethical Hacker)/CRTP/CPTS