Security Engineer

A Senior Cybersecurity Engineer is responsible for safeguarding an organization’s IT infrastructure, applications, and data against cyber threats. With 5–10 years of experience, the role demands expertise in designing, implementing, and managing advanced security solutions, conducting risk assessments, and responding to incidents. Senior Engineers also mentor junior staff and contribute to strategic security planning.

Key Responsibilities

• Design, implement, and manage enterprise-level security solutions (firewalls, IDS/IPS, SIEM, endpoint protection).
• Conduct vulnerability assessments, penetration testing, and risk analysis.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Develop and enforce security policies, standards, and compliance frameworks (ISO 27001, NIST, GDPR).
• Collaborate with IT and business teams to integrate security into system architecture and processes.
• Lead incident response drills and disaster recovery planning.
• Provide guidance and mentorship to junior cybersecurity staff.
• Stay updated on emerging threats, tools, and technologies.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 5–10 years of proven experience in cybersecurity engineering or related roles.
• Strong knowledge of network security, cloud security (AWS, Azure, GCP), and endpoint protection.
• Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight), firewalls, and intrusion detection/prevention systems.
• Certifications such as CISSP, CISM, CEH, or OSCP are highly desirable.

Skills

• Advanced problem-solving and analytical skills.
• Strong communication and leadership abilities.
• Ability to manage complex projects and handle escalations effectively.
• Proactive mindset with adaptability to evolving cyber threats.

Company Description

Appiness Interactive Pvt. Ltd. is a Bangalore-based product development and UX firm that specializes in digital services for startups to fortune-500s. We work closely with our clients to create a comprehensive soul for their brand in the online world, engaged through multiple platforms of digital media. Our team is young, passionate, and aggressive, not afraid to think out of the box or tread the un-trodden path in order to deliver the best results for our clients. We pride ourselves on Practical Creativity where the idea is only as good as the returns it fetches for our clients.

Role Overview

We are looking for an experienced Senior Cloud Security Engineer with 7+ years of experience, including strong hands-on expertise in AWS Cloud Security. The candidate will be responsible for designing, implementing, assessing, and continuously improving security across AWS cloud environments. The role requires strong knowledge of cloud security architecture, IAM, network security, threat detection, vulnerability management, incident response, security monitoring, encryption, and DevSecOps.

This is a highly technical position. Hands-on technical expertise will be given significantly more importance than communication skills. Good written and verbal communication is sufficient.

Key Responsibilities

• Design and implement secure AWS cloud architectures.
• Establish and maintain AWS security best practices and security controls.
• Implement IAM, RBAC, least-privilege access, MFA, federation and privileged access controls.
• Secure AWS networking including VPCs, Security Groups, NACLs, routing, private/public subnets and VPC endpoints.
• Implement and manage AWS security services including:
• AWS IAM
• AWS KMS
• AWS CloudTrail
• Amazon GuardDuty
• AWS Security Hub
• AWS Config
• AWS WAF
• AWS Secrets Manager
• Monitor and investigate security events, threats and suspicious activities.
• Lead or participate in cloud security incident response and root-cause analysis.
• Conduct vulnerability assessments and coordinate remediation.
• Perform AWS security posture reviews and identify misconfigurations.
• Review cloud architectures and provide security recommendations.
• Implement encryption and data protection controls.
• Secure CI/CD pipelines and support DevSecOps practices.
• Review Infrastructure as Code for security risks.
• Implement security automation wherever possible.
• Work with engineering, DevOps and infrastructure teams to embed security into the development lifecycle.
• Establish security standards, policies and controls for AWS environments.
• Support compliance requirements and security audits.
• Mentor junior engineers and provide technical guidance.

Mandatory Technical Skills

Must Have

• 7+ years of overall IT/Security/Cloud experience
• Strong AWS Cloud Security experience
• Hands-on AWS security architecture
• AWS IAM
• IAM policies, roles, permissions and least privilege
• AWS networking security
• VPC, Security Groups and NACLs
• CloudTrail and security logging
• GuardDuty
• Security Hub
• KMS and encryption
• Vulnerability management
• Cloud security monitoring
• Incident response
• Security hardening
• Security architecture/design

Good to Have

• AWS Organizations / SCP
• Terraform / CloudFormation
• DevSecOps
• CI/CD security
• Docker/Kubernetes security
• SAST/DAST/SCA
• SIEM tools
• Python/Bash/PowerShell scripting
• CIS Benchmarks
• NIST
• ISO 27001
• SOC 2
• AWS security certifications

Location : Mumbai

Big Picture (The Opportunity) :

Are you looking for an opportunity to advance your Career? & If you are able to maintain a positive attitude even when everything goes wrong, if you are detail oriented and self motivated with a passion to learn and improve your skills and knowledge, we have a perfect job for you !

What do we want from you ? (Our Expectations) :

• Zero to 2 years experience in Linux Operating System.
• Flexible working hours - able to support occasional nights, weekends, and call-ins, able to quickly adapt to a constantly changing faced paced environment. Open to travel to sites.
• An ideal person who is excited and motivated about running and supporting a production - grade critical infrastructure and looks for opportunities to improve processes with automation.

What are you required to do ? (Your Responsibilities) :

• Proactively maintain and develop all linux infrastructure technology to maintain a 24*7*365 uptime service.
• Engineering of systems administration-related various solutions for our various SAAS products and projects as well as operational needs.
• Proactively monitoring system performance and capacity planning.
• Providing technical support to customers for Applications, Operating systems, and networking.
• Will also be the first point of contact for our clients, where installations are placed on a permanent basis, for basic troubleshooting and problem solving.
• Fault finding, analysis and logging information for reporting of performance exceptions.
• Maintain best practices on managing systems and services across all environments.

Skills & Qualification Required (Add Value) :

• Graduate - Preferred to have Bachelor‘s Degree in Engineering, Computer Science or related field.
• He / She should be familiar with the installation and configuration of Linux operating systems and setup and operation of TCP/IP networking on Linux systems also familiar with Internet concepts including SMTP, IMAP, POP, HTTP, DNS, LDAP and related protocols.
• You should possess excellent communication skills .
• Knowledge of Email concepts, Helpdesk Concept , VoIP Concept , Cloud computing will be an added advantage.

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats.

The Mission

You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.

Learn more at www.shipthis.co

Role Overview

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

What You’ll be Doing

Security Operations

• Monitor infrastructure, application, and security alerts and assist with incident investigation.
• Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
• Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
• Track security issues and corrective actions through closure.

Vulnerability Management

• Run and review application and infrastructure vulnerability scans.
• Maintain a vulnerability register and coordinate remediation with engineering teams.
• Support VAPT and penetration-testing exercises and validate closure of findings.
• Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

• Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
• Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
• Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
• Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

• Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
• Maintain device inventory and monitor endpoint compliance.
• Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
• Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
• Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

• Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
• Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
• Automate repetitive deployment, infrastructure, security, and compliance tasks.
• Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
• Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Required Fundamentals

• Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
• Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
• Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Desired Qualifications

• 1–2 years of experience with strong fundamentals are welcome.
• Basic scripting knowledge in Python, Bash, or similar.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
• Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates:

• Who can join immediately
• Female candidates returning to work after a career break are strongly encouraged.

We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.

Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product

WowPe is a leading fintech company revolutionizing the way businesses handle financial transactions. Our suite of innovative products includes a secure Payment Gateway for seamless online transactions, robust Payouts solutions to streamline bulk payments, and a versatile Point of Sale (POS) system for efficient in-store transactions. At WowPe, we’re dedicated to providing user-friendly, scalable, and reliable solutions that empower businesses to grow and succeed in today’s fast-paced digital economy.

We are looking for a highly skilled Cloud Infrastructure & Cloud Network Engineer to design, build, and manage secure, scalable hybrid cloud environments at WowPe. This role will focus on cloud networking, hybrid connectivity, infrastructure automation, security, reliability, and performance across on-prem and cloud platforms (AWS/Azure). You will play a critical role in ensuring high availability, security, and performance of our fintech platforms.

A Day in the Life

• Design and review cloud network architectures (VPC/VNet, routing, segmentation)
• Troubleshoot latency, connectivity, VPN, and performance issues
• Work with DevOps and application teams to support deployments and scalability
• Automate infrastructure provisioning and security guardrails
• Monitor network health, traffic flow, and system performance
• Ensure security, compliance, and disaster recovery readiness
• Support hybrid connectivity between on-prem data centers and cloud environments.

Key Responsibilities

Cloud Networking & Hybrid Architecture

• Design and implement VPC/VNet architectures, subnetting, routing tables, NAT, gateways, and secure segmentation
• Build and manage hybrid connectivity between on-prem data centers and cloud using Site-to-Site VPN, ExpressRoute, Direct Connect
• Configure and manage Layer 4 & Layer 7 load balancers for high availability and traffic distribution
• Architect DNS, CDN, and edge networking strategies for low-latency global access

Security & Zero-Trust

• Implement Zero-Trust networking using security groups, NACLs, identity-aware proxies, mTLS
• Design secure access controls and network isolation
• Work closely with security teams to ensure PCI, ISO, SOC compliance readiness

Automation, Platform & Reliability

• Automate infrastructure provisioning using Infrastructure as Code (Terraform/ARM/CloudFormation)
• Build self-healing, auto-scaling architectures with health checks and fault tolerance
• Support and manage Kubernetes clusters (EKS/AKS) including networking and service communication
• Integrate infra with CI/CD pipelines for safe and frequent deployments

Operations & Observability

• Perform advanced troubleshooting for latency, packet loss, MTU, routing loops
• Implement and manage monitoring, logging, and observability (Prometheus, Grafana, ELK, Azure Monitor, CloudWatch)
• Design and maintain disaster recovery architectures, multi-region networking, and replication strategies
• Ensure high availability, performance optimization, and cost efficiency

Basic Qualifications & Skills

• 4+ years of experience in Cloud Infrastructure & Cloud Networking
• Strong hands-on experience with AWS and/or Azure
• Deep understanding of VPC/VNet, routing, NAT, gateways, load balancers, DNS
• Experience with Hybrid connectivity (VPN, ExpressRoute, Direct Connect)
• Solid knowledge of network security, firewalls, access control, segmentation
• Hands-on experience with Infrastructure as Code (Terraform preferred)
• Experience in monitoring, troubleshooting, and incident handling
• Strong understanding of high availability, DR, and performance optimization

Preferred Qualifications

• Experience in fintech, BFSI, or high-compliance environments
• Exposure to Zero-Trust architecture and security best practices
• Experience with Kubernetes (EKS/AKS), service mesh, microservices networking
• Familiarity with CI/CD pipelines and DevOps practices
• Knowledge of CDN, edge networking, and global traffic management
• Experience with compliance frameworks (PCI-DSS, ISO 27001, SOC2)
• Ability to design large-scale, resilient, production-grade architectures

Cloud Infrastructure Engineer – BANG | 10+ Years

Location: Bangalore

Experience: 10+ Years

Job Description:

• Design, implement, and manage cloud infrastructure across AWS/Azure/GCP environments.
• Strong experience in cloud architecture, compute, storage, networking, and security.
• Manage VMs, VPC/VNet, load balancers, DNS, DHCP, firewalls, and IAM.
• Hands-on experience with Windows/Linux servers, VMware, virtualization, and infrastructure operations.
• Automate infrastructure provisioning and configuration using Terraform, Ansible, or similar tools.
• Monitor infrastructure performance, availability, and capacity using tools such as Grafana, Prometheus, or CloudWatch/Azure Monitor.
• Handle incident management, troubleshooting, disaster recovery, backup, and high-availability requirements.
• Work with cross-functional teams to support cloud migration, infrastructure upgrades, and production environments.
• Ensure infrastructure follows security, compliance, and operational best practices.

Must-Have Skills:

Cloud Infrastructure | AWS/Azure/GCP | Networking | Linux/Windows | VMware | Terraform | Ansible | DNS/DHCP | IAM | Monitoring | Backup & DR

Greetings from zealous sevices!

GoLang (Soln Architect) -(9 AM to 6PM) 

Experience: 10-12 Yrs 

Need a senior Solution Architect - No BGV - ok with consultants 

Own end-to-end solution architecture for a cloud-based cybersecurity platform operating at massive scale (millions of assets), spanning multiple product modules and a broad third-party integration ecosystem.

What They'll Do 

Define and own the overall solution architecture across multiple product modules (e.g., detection, response, asset inventory, reporting), ensuring they work as a coherent, scalable system rather than disconnected parts 

Design for scale: architecture that reliably handles millions of assets/endpoints with predictable performance, cost, and reliability as volume grows 

Lead cloud infrastructure architecture decisions, compute, storage, networking, multi-region/multi-tenant strategy, disaster recovery 

Architect and govern third-party integrations (SIEM/SOAR, ticketing, identity providers, cloud provider APIs, threat intel feeds, etc.), define integration patterns, data contracts, and reusable frameworks rather than one-off connections 

Create and maintain architecture roadmaps, capacity plans, and technical strategy aligned with product/business roadmap 

Set architectural standards and guardrails (scalability, security, data flow, API design) across engineering teams 

Act as the technical bridge between engineering, product, security, and infrastructure/DevOps teams 

Conduct architecture reviews, threat-model system designs, and identify scaling bottlenecks or single points of failure before they hurt production 

Own key non-functional requirements: performance, availability, security, cost-efficiency, compliance 

Support presales/enterprise customer conversations on architecture, especially for large or complex deployments 

Evaluate and select core technologies (data stores, messaging systems, orchestration, IaC tooling) 

What They Should Have 

8–12+ years in software/infra engineering, with 4+ years specifically in a solution/enterprise architect role 

Proven experience architecting systems at scale (millions of records/assets/events), not just designing on paper, but having operated such systems in production 

Deep cloud architecture expertise (AWS/GCP/Azure), multi-account/multi-tenant design, cost optimization, networking, IAM 

Strong grasp of distributed systems patterns: data partitioning, eventual consistency, event-driven architecture, caching strategies

Experience designing integration architectures (APIs, webhooks, message queues) across many heterogeneous third-party systems 

Security architecture fluency,this is a security product, so the architect must think adversarially about their own system 

Ability to produce architecture documentation (C4 diagrams, ADRs, data flow diagrams) that both engineers and executives can use 

Track record of cross-functional influence, able to align multiple engineering teams around a shared architecture without direct authority 

Cybersecurity domain knowledge (SIEM/EDR/CNAPP/CSPM concepts, threat detection pipelines), or equivalent adjacent domain with fast ramp-up ability 

Nice to Have 

Experience with specific integration ecosystems relevant to your product (e.g., Splunk, ServiceNow, Okta, AWS Security Hub) 

Familiarity with IaC (Terraform), service mesh, and Kubernetes at scale Enterprise/regulated-industry experience (SOC 2, FedRAMP, ISO 27001) shaping architecture decisions 

Prior experience scaling a product from ""hundreds of thousands"" to ""tens of millions"" of managed assets

Job Description:

• Infrastructure Management: Design, implement, and manage scalable, reliable, and secure cloud infrastructure using AWS, GCP, and/or Azure.
• CI/CD Pipelines: Develop and maintain continuous integration and continuous deployment (CI/CD) pipelines to streamline the development lifecycle.
• Automation: Automate infrastructure provisioning, configuration management, and application deployment processes.
• Monitoring and Performance: Implement monitoring, logging, and alerting solutions to ensure system health, performance, and reliability.
• Security: Ensure the security of cloud infrastructure and applications, including identity management and compliance with industry standards.
• Collaboration: Work closely with client and development teams to integrate DevOps practices and deliver high-quality software.
• Documentation: Maintain comprehensive documentation of infrastructure, configurations, and processes.
• Innovation: Stay current with emerging technologies and industry trends, integrating them into the DevOps strategy as appropriate.

Qualifications: 

• Education: Bachelor's degree in Computer Science, Information Technology, or a related field.
• Experience: 7 - 10 years of overall experience with relevant experience of at least 7 years in DevOps and served as a lead or senior engineer.

Strong Product Security Engineer / Security Engineer / Application Security Engineer / DevSecOps Engineer profiles

2

Mandatory (Experience 1) – Must have minimum 4+ years of hands-on Application/Product Security or Security Engineering experience,

3

Mandatory (Experience 2) – Strong hands-on experience in AWS Cloud Security, Infrastructure Security, and Application Security, with the ability to identify and address security risks at the application/code level.

4

Mandatory (Experience 3) – Must have hands-on experience in secure SDLC/DevSecOps, including code review, API security, CI/CD security automation, vulnerability management, VAPT/penetration testing, and security tooling.

5

Mandatory (Experience 4) – Must have hands-on experience with security audits and compliance frameworks, including SOC 2, GDPR, and ISO 27001, preferably having participated in or driven audits.

6

Mandatory (Experience 5) – Experience setting up, managing, and tracking security tools such as MDM, endpoint agents, security monitoring/scanning tools, secrets/access management, and related security tooling.

7

Mandatory (Experience 6) – Must demonstrate strong coding/development understanding with the ability to read/write code and assess security of APIs, applications, databases, and distributed systems; not just operate security tools.

8

Preferred (Experience 1) – Relevant security certifications such as CISSP, CEH, OSCP, or equivalent.