Information Security Associate

About Policybazaar.com -

Welcome to Policybazaar’s official LinkedIn page. We believe in insurance for all, and we drive it through unbiased information and time-efficient processes for all Indian customers. As India's largest insurance brokers, we consider it our responsibility to be every Indian customer's one-stop portal for protection against death, disease and disability -- as well as for mindful investment planning. We understand customers' anxiety about claim settlement, so we offer 24x7 online support, on-ground support, as well and even host special claim samadhan events where stuck claims can be reopened and resolved instantly. Our mission, in keeping with IRDAI's inspiring vision, is Har Family Hogi Insured by 2047.

Group Companies – Paisabazaar.com, QuickFixCars, Policybazaar.ae, Zphin

Visit policybazaar.com to know more about us.

About the Job

We are looking for an Information Security Associate with expertise in conducting technical security assessments of organization's assets to identify vulnerabilities and evaluate the effectiveness of existing security controls

Your contribution in PB’s journey

• Conducting vulnerability scans and penetration testing to identify security weaknesses across infrastructure and application(web and mobile application) landscape
• Documenting and reporting findings, including recommendations for remediation and liaising with internal stakeholders for closure
• Staying current with new attack vectors and tools, and incorporating them into testing procedures
• Collaborating with other teams to prioritize remediation efforts.

Your knowledge & expertise that we need

• Proven work experience of 1-2 years as an Information Security Associate/Engineer or a similar role.
• B.Tech or equivalent degree in Computer Science, Information Security or related fieldProficient with Linux and Windows
• Excellent written and verbal communication skills
• Knowledge of OWASP Top 10, NIST CSF, MITRE ATT&CK is preferable
• Good to have technical security certifications like OSCP, PNPT, CRTP, or similar
• Experienced in DAST, SAST and infrastructure penetration testing techniques
• Experienced in penetration testing methodolgy and techniques
• Ability to identify security vulnerabilities and suggest appropriate mitigation steps
• Ability to contribute individually, and as a part of team.