Security Engineer

AWS / Kubernetes / OpenShift / Linux – Job Description

Role: Cloud / DevOps Engineer

Experience: 4–8 Years

Location: Bangalore

Mandatory Skills: AWS, Kubernetes, OpenShift, Linux

Job Summary

Looking for a Cloud/DevOps Engineer with strong hands-on experience in AWS, Kubernetes, OpenShift, and Linux. The candidate will be responsible for managing cloud infrastructure, container platforms, deployments, monitoring, and troubleshooting.

Key Responsibilities

• Manage and support AWS cloud infrastructure and services.
• Deploy and manage applications using Kubernetes and OpenShift.
• Perform Linux administration, troubleshooting, and issue resolution.
• Monitor application and infrastructure health and resolve production issues.
• Work on containerized applications and deployments.
• Support scaling, configuration, upgrades, and maintenance of Kubernetes/OpenShift environments.
• Troubleshoot cloud, container, and Linux-related issues.
• Collaborate with development and operations teams for deployments and releases.
• Follow security, availability, and operational best practices.

Mandatory Skills

• Strong hands-on experience in AWS
• Good experience with Kubernetes
• Hands-on experience in OpenShift
• Strong Linux administration and troubleshooting skills
• Experience in cloud/container environment support
• Good production troubleshooting and incident management skills

Job Title: L2 GCP Cloud Infrastructure & Operations Engineer

Experience: 3–6 Years

Location: Pune

Employment Type: Full-time

Job Overview

We are looking for an experienced L2 GCP Cloud Infrastructure & Operations Engineer with strong hands-on experience managing, monitoring, and troubleshooting Google Cloud Platform infrastructure in a production environment.

The ideal candidate should have practical experience in Compute Engine, Linux administration, GCP networking, incident management, and cloud infrastructure troubleshooting.

Key Responsibilities

• Manage and troubleshoot GCP infrastructure, including Compute Engine VMs, disks, snapshots, and cloud resources.
• Perform Linux system administration, OS patching, security updates, and performance troubleshooting.
• Configure and troubleshoot GCP networking components, including VPCs, subnets, firewall rules, routes, Cloud NAT, VPN, DNS, and load balancing.
• Handle L2 production incidents, service requests, escalations, root-cause analysis (RCA), and SLA commitments.
• Monitor infrastructure using Google Cloud Monitoring and Cloud Logging; investigate alerts and resolve service issues.
• Administer IAM roles, service accounts, permissions, and infrastructure security controls.
• Support backup, restoration, disaster recovery, and high-availability operations.
• Automate infrastructure provisioning and operational tasks using Terraform, Ansible, Bash, or Python.
• Maintain technical documentation, operational procedures, and incident reports.

Required Skills

• 3–6 years of experience in cloud infrastructure, cloud operations, or production support.
• Hands-on production experience with Google Cloud Platform (GCP).
• Strong knowledge of Compute Engine, Linux administration, and infrastructure troubleshooting.
• Practical understanding of VPC networking, firewall rules, routing, NAT, VPN, and load balancing.
• Experience handling production incidents, troubleshooting, RCA, and SLA-driven support.
• Familiarity with Cloud Monitoring, Cloud Logging, IAM, backup, and recovery procedures.
• Working knowledge of Terraform, scripting, or configuration management tools.

Preferred Skills

• Google Associate Cloud Engineer or Professional Cloud certifications.
• Experience supporting enterprise production environments.
• Exposure to Kubernetes/GKE, CI/CD pipelines, and infrastructure automation.

Important Candidate Requirement

Candidates must have practical, hands-on experience resolving production infrastructure issues in GCP. Candidates whose experience is limited to theoretical knowledge, training, certifications, or application-level support without infrastructure troubleshooting experience may not be suitable.

Ideal Candidate Profile

A cloud operations or infrastructure support engineer who has personally managed GCP resources, investigated production incidents, troubleshot Linux and networking issues, and maintained service availability.

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.

What An Ideal Candidate Would Look Like: 

• Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
• Technology Stack: AWS, GCP, Objective C, Java, Python
• Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities

Minimum Requirements

• 2-4+ years of experience in application security and vulnerability research
• Strong foundation in mobile app security - Android or Ios
• Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
• Strong understanding of exploit mitigations and proven ability to bypass them
• Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
• Develop AI-driven agents to automate dynamic analysis
• Should be able to Leverage AI/LLMs to augment Pentesting efforts
• Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables

Good to have Requirements

• Understanding of AI/ML security risks

Responsibilities

• Security assessment of web/mobile applications on various platforms
• Focusing on Mobile Application Security Research for new vulnerabilities
• Static and Dynamic Code Analysis
• Develop and interpret security standards and guides
• Automation of exploit development 
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and technique

Work Expectations

Within 1 month

Training on processes, security workflows and develop understanding on internal tools.

Within 3 months

Actively contributing in exploit development and automation of it with the team.

Within 6 months

Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.

Within 1 Year

By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.

Personality traits we really admire

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process - would be team specific

• Round 1- CTF round 
• Round 2 -Profile Evaluation; HR
• Round 3 -Technical Interview with security team members
• Round 4 -Technical Interview with the Hiring Manager
• Round 5 -Technical round with CTO
• Round 6 -HR Round

Compensation

• As per Industry Standards

Why Join Us

• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.

Required Skills & Qualifications

• Experience: 10+ years in Cloud Engineering, Infrastructure, or DevOps, with strong hands-on GCP experience.
• GCP Expertise: GKE, Compute Engine, IAM, VPC, Cloud Storage, Cloud SQL, Cloud Run, Cloud Functions, and Load Balancing.
• Kubernetes & Containers: GKE, Docker, Kubernetes networking, Helm, and troubleshooting.
• DevOps & IaC: Azure DevOps, Terraform, CI/CD pipelines, and infrastructure automation.
• Scripting: Python, Bash, or PowerShell.
• Security & Operations: Cloud security, IAM, monitoring, incident management, and cost optimization.
• Leadership & Ownership: Proven experience in team leadership, cross-functional collaboration, stakeholder management, managing multiple product-line deliverables, and handling competing priorities and ad hoc requests.
• Additional Advantage: Experience with Microsoft Azure.

Job Summary

We are looking for an experienced SRE / DevOps Engineer with strong expertise in production support, site reliability engineering, cloud infrastructure, automation, and monitoring. The candidate should have experience maintaining highly available systems, troubleshooting production issues, and improving infrastructure reliability and performance.

Mandatory Skills

• Site Reliability Engineering (SRE)
• DevOps Engineering
• Production Support
• Linux Administration
• Cloud Infrastructure (AWS / Azure / GCP)
• Kubernetes and Docker
• CI/CD pipelines
• Monitoring and Observability
• Scripting using Python / Shell
• Incident Management and Root Cause Analysis

Key Responsibilities

• Monitor and maintain the availability, reliability, and performance of applications and infrastructure.
• Handle production incidents, troubleshoot issues, and perform root cause analysis.
• Manage and automate infrastructure deployment and operational tasks.
• Work with CI/CD pipelines and container orchestration platforms.
• Implement monitoring, alerting, and observability solutions.
• Collaborate with development and operations teams to improve system reliability.
• Support cloud infrastructure, Linux environments, and production deployments.
• Identify recurring issues and implement preventive measures to reduce downtime.

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

Are you passionate about Linux, Docker, Kubernetes, and Cloud Infrastructure Support? Join a dynamic technology team where you’ll lead container infrastructure support, troubleshoot critical production issues, and drive operational excellence.

🔹 Key Responsibilities & Requirements

·7+ years’ experience in Linux, Kubernetes (AKS/EKS), AWS cloud, and Web server support experience including Docker & container experience

· Should have solid understanding of cloud architecture (AWS and Azure) and components & native services.

·Solid work experience on any incident management, problem management, change management tool

·Good experience in Load Balancing technology primarily distributed F5.

·Good experience in release management tools like Ansible and Github

· Procurement/conversion/renewal/application of SSL certificates in PFX, CRT, JKS formats etc.

· Knowledge of Web Hosting n-tier infrastructures, specifically Firewalls, hardware load-balancers, SSL offloading, etc.

·Strong verbal and written communication skills

·Strong delivery focus with ability to multi-task and work on various projects concurrently, meeting client expectations and deadlines

·Strong motivation and ability to work in a fast paced, team-oriented environment

·Well balanced technical, client service and client management skills   

·Sound experience in monitoring and observability tools such as Datadog

·Work on rotational shift and be on call providing global hours support, including weekends.

What you need to have:

Participate in providing 24X7 support in OSS2 supporting RHEL Linux and Docker/Containers infrastructure

Leading the technical docker team in the implementation and support of business applications that are hosted on Kubernetes (EKS and AKS).

Liaise with technical stakeholders such as architects and developers, in the infrastructure implementation and support. Developing and reviewing the technical operations standards and guidance.

Support operational excellence by identifying ongoing operational issues, root-cause analyses on outages and identifying the relevant remediation plans to strategically address them.

Willingness to work on weekends and on rotational shifts.

What makes you stand out?

Experience of any incident management and change management tool like ServiceNow.

Experience with Kubernetes (EKS and AKS), Github and Github actions.

Experience with APIGEE X or API Gateway is an advantage but not mandatory

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.

Learn more at www.shipthis.co

Role Overview

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

What You’ll be Doing

Security Operations

• Monitor infrastructure, application, and security alerts and assist with incident investigation.
• Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
• Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
• Track security issues and corrective actions through closure.

Vulnerability Management

• Run and review application and infrastructure vulnerability scans.
• Maintain a vulnerability register and coordinate remediation with engineering teams.
• Support VAPT and penetration-testing exercises and validate closure of findings.
• Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

• Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
• Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
• Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
• Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

• Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
• Maintain device inventory and monitor endpoint compliance.
• Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
• Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
• Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

• Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
• Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
• Automate repetitive deployment, infrastructure, security, and compliance tasks.
• Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
• Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Required Fundamentals

• Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
• Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
• Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Desired Qualifications

• 1–2 years of experience with strong fundamentals are welcome.
• Basic scripting knowledge in Python, Bash, or similar.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
• Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates:

• Who can join immediately
• Female candidates returning to work after a career break are strongly encouraged.

We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.

Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product