Sr Security Engineer

About the Position

We are seeking a Sr Security Engineer with 4+ years of experience in cloud security architecture to join our team in Bangalore, India.

Responsibilities

• Conduct penetration testing and vulnerability assessments on web applications, APIs, and cloud platforms (AWS, GCP, etc.) to identify vulnerabilities and potential attack vectors.
• Identify security design gaps in new and existing cloud architectures and collaborate with cross-functional teams to design effective mitigation strategies.
• Perform cloud security assessments, evaluating security controls and deployment models on various cloud platforms.
• Lead and oversee the security team to ensure high-quality deliverables for clients.
• Document findings, methodologies, and exploitation techniques in clear, actionable reports for both technical and non-technical stakeholders.
• Lead incident response efforts in the event of security breaches or incidents.
• Provide guidance, training, and mentorship to junior team members.
• Perform threat modeling for cloud-based scenarios and apply principles to enhance platform security.
• Plan and execute social engineering assessments to evaluate susceptibility to phishing, pretexting, and other manipulation techniques.
• Demonstrate a deep understanding of cloud security concepts and best practices, advising clients on securing their environments effectively.
• Define and develop build and release best practices, collaborating with teams to promote secure development and deployment.
• Work with teams to implement security controls, defenses, and countermeasures to prevent internal or external attacks on cloud environments.
• Stay current with developments in AppSec and CloudSec, researching emerging threats, attack vectors, and vulnerabilities in cloud and web technologies.

Requirements

• Education: Bachelor’s Degree in Computer Science.
• Experience: 4+ years as a Penetration Testing Expert.
• 3+ years of hands-on experience in cloud security architecture (AWS & GCP), including native tools and best practices.
• Experience in planning and executing penetration tests/red team exercises for web applications, APIs, containers, and cloud platforms.
• Proficiency in creating exploits and PenTest scripts.
• Strong understanding of testing frameworks such as PTES and OWASP; expertise in OWASP Top 10 is essential.
• Familiarity with industry-standard security practices (OWASP, SANS) and compliance frameworks such as ISO 27001, SOC 2, HIPAA, etc.
• Proficiency in using tools like Burp Suite, Metasploit, Nessus, Wireshark, nmap, etc.
• Knowledge of security for containers, hands-on experience with DevSecOps principles, and end-to-end secure development processes.
• Relevant experience in DevOps and cloud migration.
• Excellent communication skills.
• Strong critical thinking and problem-solving abilities.

Good to Have Certifications

• Offensive Security Certified Professional (OSCP)
• GIAC Certified Penetration Tester (GPEN)
• eLearn Security Web Application Penetration Tester eXtreme (eWPTX)
• CREST Registered Penetration Tester (CRT)
• AWS Certified Security – Specialty
• Google Cloud – Professional Cloud Security Engineer (PCSE)
• Certified Cloud Security Professional (CCSP)

We Offer

• Competitive salary
• Opportunity to work in a dynamic and innovative environment
• Professional growth and development opportunities
• Collaborative and inclusive work culture

About the Company

Join our team and contribute to securing the digital future. We value innovation, integrity, and excellence.

Apply Now and be part of our journey to make the cloud safer for everyone.