{"id":2412062,"url":"https://alion.io/job/huron-lead-security-engineer","title":"Lead Security Engineer","company":{"id":3031,"name":"Huron","domain":"huronconsultinggroup.com","url":"https://alion.io/company/huron","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":61000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Burp Suite","optional":true},{"name":"DNS","optional":true},{"name":"Metasploit","optional":true},{"name":"Nessus","optional":true},{"name":"Nmap","optional":true},{"name":"OWASP ZAP","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"TCP/IP","optional":true}],"status":"live","first_seen_at":"2026-09-24T00:00:00Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-13T03:33:09Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Huron is redefining what a global consulting organization can be. Advancing new ideas every day to build even stronger clients, individuals and communities. We’re helping our clients find new ways to drive growth, enhance business performance and sustain leadership in the markets they serve. And, we’re developing strategies and implementing solutions that enable the transformative change they need to own their future.\nAs a member of the Huron corporate team, you’ll help to evolve our business model to stay ahead of market forces, industry trends and client needs. Our accounting, finance, human resources, IT, legal, marketing and facilities management professionals work collaboratively to support Huron’s collective strategies and enable real transformation to produce sustainable business results.\nJoin our team and create your future.\nThe Lead security engineer - Senior Associate will play a critical role in strengthening the organization’s security posture through proactive identification, exploitation, and mitigation of security weaknesses across applications, networks, endpoints, and infrastructure. This role focuses on penetration testing, vulnerability assessment and management (using tools like Tenable), application security assessment, and custom security tool development, while also supporting incident investigation and continuous security improvement initiatives.The individual will work closely with security, infrastructure, and application teams to identify risks, provide actionable remediation guidance, and help define and mature enterprise security best practices.\nRequirements:\nApplication Security Assessments (AppSec)\nPerform application security assessments across web, API, and internal applications using OWASP methodologies (OWASP Top 10, OWASP ASVS, OWASP Testing Guide) and other industry-accepted frameworks.\nConduct Dynamic Application Security Testing (DAST) to identify runtime vulnerabilities such as injection flaws, authentication/authorization issues, session management weaknesses, and business logic flaws.\nPerform Static Application Security Testing (SAST) to analyze source code and binaries for insecure coding patterns, vulnerabilities, and compliance with secure coding standards.\nCarry out manual secure code reviews to identify complex vulnerabilities that automated tools may miss, including logic flaws, insecure cryptographic usage, and improper input validation.\nProvide clear, actionable remediation guidance to development teams, including secure coding recommendations and examples.\nWork closely with application owners and developers to retest fixes and confirm successful remediation.\nVulnerability Management\nConduct vulnerability scanning, monitoring, and reporting across enterprise assets using Tenable and other relevant tools.\nAnalyze vulnerability scan results, validate findings, eliminate false positives, and prioritize remediation activities.\nProvide clear mitigation and remediation recommendations to infrastructure, application, and operations teams.\nProactively follow up on remediation efforts and track vulnerability closure to ensure risk reduction.\nOffensive Security & Penetration Testing:\nAssist in designing, developing, and executing penetration testing plans for applications, networks, cloud, and infrastructure environments.\nPerform manual and automated security testing to identify vulnerabilities, misconfigurations, and exploitable weaknesses.\nDevelop and maintain custom scripts and security tools to enhance penetration testing, automation, and validation efforts.\nCollaborate with cross-functional teams to perform security reviews and assessments for applications and network components.\nThreat, Malware & Research (Good to Have)\nPerform basic to intermediate threat analysis and malware analysis to understand attacker techniques and behaviors.\nResearch emerging threats, vulnerabilities, exploits, and attack techniques relevant to the organization.\nRecommend security enhancements, tools, and process improvements based on threat intelligence and industry trends.\nPreference:\nBachelor’s or master’s degree in computer science or related on field experience is a must.\nExperience using Burp Suite, Owasp ZAP and other application security assessment tools.\nExperience of performing secure code reviews and static reviews using different tools or manually.\nStrong hands-on experience with vulnerability assessment and penetration testing.\nExperience using Tenable (Nessus/Tenable.sc/Tenable.io) for vulnerability management and other penetration testing tools like nmap, Metasploit etc.\nSolid understanding of network, application, endpoint, and infrastructure security.\nProficiency in scripting or programming (e.g., Python, Bash, PowerShell, or similar) for custom security tools and automation.\nGood understanding of TCP/IP, DNS, HTTP/HTTPS, authentication mechanisms, and common attack techniques.\nAbility to clearly document findings and communicate risks to both technical and non-technical stakeholders.\nProactive mindset with the ability to identify, track, and follow up on security risks.\nGood to have Knowledge or experience in threat intelligence, malware analysis, or reverse engineering\nPosition Level\nSenior AssociateCountry\nIndia","description_format":"text","description_chars":5250,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Data & Analytics","Government","Professional Services","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-13T02:21:44Z"}],"visa":[],"liveness":{"score":71,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.79,"p_room":0.9,"age_days":19,"expected_fill_days":29,"reasons":["conf:2","win:mid","comp:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/huron-lead-security-engineer","json_url":"https://alion.io/job/huron-lead-security-engineer.json","meta":{"generated_at":"2026-10-13T12:20:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19156,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3031},"rest":"https://alion.io/mcp/rest/get_company?id=3031"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhuron-lead-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhuron-lead-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhuron-lead-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/huron-lead-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhuron-lead-security-engineer"}]}