Senior Software Engineer - Digital & Ops

HD Supply
Chennai
Workplace: OnsiteFull timeFunction: Software EngineeringSkills: ["Communication","Risk translation","Leadership","Mentoring","Attention to quality"]

Design, secure, and continuously improve monitoring, compliance, and threat-detection capabilities that support global information security objectives. Perform end-to-end web, API, mobile, and infrastructure penetration testing (including retesting), validate exploitability and business impact, and deliver executive-ready penetration test reporting. Partner with development teams to embed security testing into SDLC/CI-CD, conduct threat modeling and architecture reviews, and support remediation through the full risk lifecycle.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
HD Supply
HD Supply
2 days ago

Senior Software Engineer - Digital & Ops

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live
Reposted: similar role first listed 3 months ago

Job Summary

Design, secure, and continuously improve monitoring, compliance, and threat-detection capabilities that support global information security objectives. Perform end-to-end web, API, mobile, and infrastructure penetration testing (including retesting), validate exploitability and business impact, and deliver executive-ready penetration test reporting. Partner with development teams to embed security testing into SDLC/CI-CD, conduct threat modeling and architecture reviews, and support remediation through the full risk lifecycle.
Location: Chennai
Workplace: Onsite
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Design and deploy monitoring, compliance, and threat-detection capabilities to provide continuous assurance and visibility.
  • •Independently perform full-cycle Web, API, Mobile, and Infrastructure penetration tests, including documentation and retesting to confirm remediation closure.
  • •Validate exploitability and business impact beyond scanner findings, producing clear, actionable penetration test reports.
  • •Conduct security testing within SSDLC and CI/CD, supporting static, dynamic, and manual security testing efforts plus threat modeling and architecture reviews.
  • •Track findings through the remediation lifecycle and collaborate with development and leadership to discuss risk posture, trends, and secure design decisions.

Key Requirements

  • •Strong hands-on experience conducting manual web application penetration tests and structured security testing.
  • •Deep knowledge of OWASP Web/API/Mobile Top 10 vulnerabilities and the ability to execute testing using OWASP WSTG and procedures.
  • •Ability to test RESTful APIs across authenticated and unauthenticated contexts, including authZ/authN, tokens (OAuth/JWT), API keys, and common API abuse cases.
  • •Ability to perform full-cycle internal and external infrastructure penetration tests, including scoping, execution, documentation, and retesting with remediation validation.
  • •At least one relevant offensive security certification (OSCP, CRTO, OSWP, OSEP, PNPT, or similar) plus proficiency with industry-standard security testing tools.
Experience:InfosecPentestingAppSecCloud securityMicroservices
Skills:CommunicationRisk translationLeadershipMentoringAttention to quality
Certifications:OSCPCRTOOSWPOSEPPNPT
Tech Stack:PythonBurp SuiteNmapSQLmapOWASPOWASP WSTGPTESSTRIDESnykNessusAzureMicrosoft 365Entra IDGCPActive DirectoryKerberoastingAS-REP roastingBloodHoundSMBRDP

Company Brief

HD Supply
Wholesale distributor of maintenance, repair and operations (MRO) products, providing building materials, construction supplies, and related services to contractors, property managers, and facility maintenance professionals across North America.
Industry: Wholesale & Distribution
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Established Company
Valuation: Unicorn (USD 1B+)
Funding: Private Equity Backed
Headquarters: Atlanta, United States
WebsiteLinkedIn