1 month ago
Remote, IndiaSenior
Responsibilities
- Collaborate with engineering and infrastructure teams to identify and remediate security gaps across the SDLC, cloud infrastructure, and related processes.
- Integrate security practices from threat modeling through system decommissioning and guide teams in prioritizing vulnerability remediation.
- Perform manual penetration testing of web and mobile applications and APIs, and audit source code and critical application changes.
- Deploy security services and tools through infrastructure as code, build security automation, and develop custom security solutions.
- Conduct cloud security assessments and configuration reviews while driving critical risk mitigation with engineering teams.
- Build, promote, and scale DevSecOps and security-as-code practices across the company.
- Lead cross-functional collaboration, communicate security risks, and support security program initiatives.
Requirements
- 10+ years of experience in security engineering, specializing in application security and cloud security.
- Strong familiarity with Linux, AWS, GCP, cloud networking, and cloud security services and patterns.
- Understanding of AWS architecture and services including EC2, ECS, Lambda, and RDS, as well as microservices architecture.
- Experience implementing secure infrastructure as code and working with Docker and Kubernetes container deployments.
- Hands-on experience with web application and API penetration testing, threat modeling, and the OWASP Top 10 and CWE 25.
- Experience using SAST, DAST, IAST, and SCA tools.
- Ability to communicate security threats and risks clearly to engineering teams and work independently on new initiatives.
- Bachelor’s degree or experience with a master’s degree in Computer Science.
- Preferred experience includes mobile application penetration testing, Python scripting, AI and LLM security automation, AWS DevOps, GitHub Actions, Jenkins, and relevant security certifications such as CREST, OSCP, OSWE, CEPT, CMWAPT, GPEN, PentTest+, AWS Cloud Practitioner, AWS Security Specialty, or an AWS Associate certification.
Tech Stack
Categories
