Manager/Senior Manager - Platform Security Specialist

Recruitment for the role of Manager/Senior Manager - Platform Security Specialist About GeM Government eMarketplace (GeM) is a unified digital platform that facilitates end-to-end procurement of goods and services by various government departments, organizations, and public sector undertakings (PSUs).

Our Honourable Prime

Minister’s concerted efforts to harness the power of digital platforms to achieve ‘Minimum Government, Maximum Governance’ led to the genesis of GeM in 2016. GeM provides a paperless, cashless and contactless ecosystem for government buyers to directly purchase products and services from pan-India sellers and service providers through an online platform. GeM covers the entire gamut of procurement process, right from vendor registration and item selection by buyers to receipt of goods and facilitation of timely payments.

GeM has envisioned to utilise the agility and speed that come along with a digital platform created with a strategic intent to reinvigorate public procurement systems and bring about a lasting change for the underserved as well as the nation. Built on the pillars of Efficiency, Transparency and Inclusivity, GeM has emerged as a digital tool in nation’s interest, aimed at catalyzing excellence in public procurement. To know more about us, please visit- https://gem.Gov.In/ You may also follow us on social media platforms like – Twitter, LinkedIn, Koo App, YouTube, Facebook GeM invites applications from eligible candidates for recruitment to the following position(s) on Contractual Basis: This is a contractual engagement under the Project Management Unit (PMU) for an initial period of 5 years, extendable based on performance and organizational requirements.

Eligible applicants can apply by submitting their applications by 16-June-26. GeM selection committee reserves the right to relax or extend the eligibility criteria and educational qualifications. The crucial date for determining eligibility will be the last date of receipt of applications.

No applications shall be entertained under any circumstances after the stipulated date. Incomplete applications without application form shall not be considered. GeM reserves the right to shortlist candidates for interview.

Applicants should note that mere fulfilment of minimum eligibility criteria may not ensure consideration for short listing for interview. GeM will not entertain any correspondence on this subject and decisions of GeM will be final in all matters. Designation - Manager/Senior Manager - Platform Security Specialist Level-E3/E4 Job Location-New Delhi Type Of Employment-Contractual under Project management unit (PMU) of GeM.

Role Overview We are seeking a Platform Security specialist with hands-on expertise in offensive testing, client-side exploitation, and architectural hardening to uncover and remediate vulnerabilities in GeM and new portal, which is currently under development. This role will lead structured diagnostic assessments—including session management, context token validation, API replay protection, cross-window/browser exploitation, and fraud detection—while also executing real-world ethical hacking simulations to expose weaknesses before adversaries do. You will design and enforce zero-trust client–server models, implement tamper-evident protocols, and ensure that critical business logic remains secure in our micro-frontend and microservices architecture.

Role And

Responsibility 1.

Offensive

Security & Ethical Hacking - Perform full-spectrum penetration testing (frontend, backend, APIs) targeting:

  • React micro frontends and ReactNative mobile apps
  • Java Spring Boot and Ruby on Rails backend services
  • Integration points (API gateways, service orchestrations)
  • Simulate client-side tampering via:
  • Browser developer tools (DOM manipulation, JS injection)
  • Network request interception/replay
  • Cross-tab/window state manipulation
  • Conduct diagnostic assessments as per security questionnaire:
  • Session & Search Management
  • Audit search session ID generation and isolation
  • Test multiple-tab/multiple-window handling
  • Verify that L1 (lowest price) determinations are server-authoritative
  • Assess persistence and cryptographic signing of search results
  • Purchase Token & Validation System
  • Analyze purchase API payloads for session binding & tokenization
  • Verify token one-time use & binding to search sessions
  • Detect cross-search purchase vulnerabilities
  • Cross-Window & Browser Security
  • Evaluate browser fingerprinting & cross-window manipulation detection
  • Test developer tools / DOM tamper detection capabilities
  • API Security & Replay Protection
  • Test request idempotency & replay attack resilience
  • Audit depth of server-side validation beyon
Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...