Senior Application Security Engineer

Location: Bengaluru,Karnataka,India

About MediBuddy

MediBuddy is India’s largest on-demand, full-stack digital healthcare platform that helps patients access multiple healthcare services. It gives users 24x7 access to high-quality healthcare at their fingertips. MediBuddy helps its users consult specialist doctors, order medicines and book lab tests from the comfort of their homes. It is also a partner to several leading corporate customers in the country and helps their employees access multiple healthcare benefits. MediBuddy users have access to online doctor consultations, wellness, preventive care services, fitness and hospitalization offered by its pan-India network of healthcare providers with its unparalleled reach.

It also provides its customers hassle-free, end-to-end surgery care through a Care Buddy, right from connecting them to the right surgeon to post-operative recovery care. MediBuddy’s surgery care provides specialized treatment in several other departments like Proctology, Ophthalmology, Vascular, ENT, Orthopaedics, Urology, Gynaecology, and more. With full-stack Surgery Care management services, MediBuddy assures customers an array of solutions for every medical, financing, insurance, and recovery need of its customers undergoing surgery. 

The digital healthcare platform has a partner network of 90,000+ doctors, 7,100+ hospitals and clinics, 4,000+ diagnostic centers, 2,500+ pharmacies along with a team size of 2200+ members. It has created an integrated healthcare ecosystem that offers patients seamless access anytime and anywhere. It has created an integrated healthcare ecosystem that offers patients seamless access anytime and anywhere in 10 minutes. With its healthcare services available in 16 Indian languages to enable customer-friendly consultation, MediBuddy is bridging the Urban-Rural quality healthcare divide. MediBuddy offers online and offline doctor consultations, medicine delivery, lab tests at home, mental health consultations, surgery care, among other healthcare services.

MediBuddy has catered to the healthcare needs of 3Cr Indians & attends to the needs of over 35,000 Indians daily across the length and breadth of the country. The app connects patients to experienced and verified doctors for online consultations across 22+ specialities such as Dermatology, Paediatrics, Gynaecology and more, instantly via chat, video, or voice call.  MediBuddy is the pioneer in providing a healthcare subscription plan under the name of MediBuddy Gold, covering unlimited specialist doctor consultations for the user and the family. 

MediBuddy is also the largest provider of employee health and wellness benefit services, catering to 700+ companies across India and in turn helping 50 Lakh employees including their family members with high-quality healthcare services. MediBuddy provides services that cover health expenses across Out-patient services(OPD) and hospitalisation in collaboration with insurance companies. 

MediBuddy is led by co-founders Mr. Satish Kannan & Mr. Enbasekar, as CEO & CTO, respectively.
The platform has so far raised over $170 million from Quadria Capital, Lightrock India, India Life Sciences Fund III LLC, Bessemer Venture Partners, Rebright Partners, TechMatrix Corporation, DeNA networks, Milliways Fund LLC, Mitsui Sumitomo (MSIVC), TEAMFund LP, JAFCO Asia Fund, FinSight Ventures, ALES Global Japan, Beyond Next Ventures, Makita corporation, InnoVen Capital, Stride Ventures and Alteria Capital.

MediBuddy’s pioneering work has been widely recognised by many leading entities:

• MediBuddy - Best Brand 2021 in Healthcare by ET Edge

• MediBuddy - Best Brand 2020 in Healthcare by ET Edge

• MediBuddy - Best Health & Wellness Solution by ET- Intelligent Health & Tech Awards 2020

• MediBuddy also bagged Marketing Campaign of the Year - #AapkaHealthBuddy & Award for Best Marketing Excellence in Health & Wellness Sector at National Awards for Marketing Excellence

• The “Industry Achievement Award 2019” by Hurun Report.

• The digital healthcare platform also bagged 3 coveted awards- Best Healthcare Entrepreneur of the Year, Best Marketing Campaign, Best healthcare start-up of the year at Healthcare Leadership Awards presented by ABP News in the year 2019

• Best healthcare startup company of the year, Best use of social media & Digital marketing in Healthcare, Best Marketing Campaign - #BaatTohKaro (DocsApp) & Best Healthcare Entrepreneur of the year- Satish Kannan at National Healthcare Leadership Congress Awards presented by Zee Business in the year 2019. 

• The ‘App of the Year 2017’ in the medical category by Amazon in association with Facebook.

Job Summary:

We are seeking a highly skilled and experienced Application Security Engineer to join our team. The ideal candidate will be responsible for ensuring the security of our web and mobile applications and will play a crucial role in protecting our customer's sensitive information. The successful candidate will work closely with software development teams to identify, prioritize, and remediate security vulnerabilities throughout the software development lifecycle.

Key Responsibilities:

• Perform security testing on web application, mobile applications, API's, networks, etc. based on standards such as OWASP top 10
• Perform static and dynamic testing (SAST & DAST)
• Design strategy and plans around application testing across several stages
• Use automated and manual code review techniques to identify vulnerabilities
• Work with development teams and contribute to design, development, and support of projects with security recommendations across the life cycle
• Document common findings and its remediation plans to help development teams
• Work with and manage external vendors and auditors during assessments
• Conduct security training for development teams.
• Staying current with latest trends, tools, techniques, etc. in application security

Qualifications:

• Bachelor's degree in Computer Science or a related field.
• 5-8 years of experience in application security engineering.
• CEH or equivalent certification
• Thorough understanding on standards such as OWASP, SANS, etc
• Good knowledge of security technologies such as cryptography, authentication techniques, risk identification and assessment, etc
• Experience with application security testing tools such as AppScan, Burp Suite, Snyk etc
• Knowledge on cloud infrastructure, associated risks, and SaaS applications and mobile apps
• Hands-on experience with Node.js and Python would be a plus.
• Excellent communication and interpersonal skills.