Senior Information Security Engineer (DevSecOps)

Company Description

Appiness Interactive Pvt. Ltd. is a Bangalore-based product development and UX firm that specializes in digital services for startups to fortune-500s. We work closely with our clients to create a comprehensive soul for their brand in the online world, engaged through multiple platforms of digital media. Our team is young, passionate, and aggressive, not afraid to think out of the box or tread the un-trodden path in order to deliver the best results for our clients. We pride ourselves on Practical Creativity where the idea is only as good as the returns it fetches for our clients.

Role Overview

We are looking for an experienced Senior Cloud Security Engineer with 7+ years of experience, including strong hands-on expertise in AWS Cloud Security. The candidate will be responsible for designing, implementing, assessing, and continuously improving security across AWS cloud environments. The role requires strong knowledge of cloud security architecture, IAM, network security, threat detection, vulnerability management, incident response, security monitoring, encryption, and DevSecOps.

This is a highly technical position. Hands-on technical expertise will be given significantly more importance than communication skills. Good written and verbal communication is sufficient.

Key Responsibilities

• Design and implement secure AWS cloud architectures.
• Establish and maintain AWS security best practices and security controls.
• Implement IAM, RBAC, least-privilege access, MFA, federation and privileged access controls.
• Secure AWS networking including VPCs, Security Groups, NACLs, routing, private/public subnets and VPC endpoints.
• Implement and manage AWS security services including:
• AWS IAM
• AWS KMS
• AWS CloudTrail
• Amazon GuardDuty
• AWS Security Hub
• AWS Config
• AWS WAF
• AWS Secrets Manager
• Monitor and investigate security events, threats and suspicious activities.
• Lead or participate in cloud security incident response and root-cause analysis.
• Conduct vulnerability assessments and coordinate remediation.
• Perform AWS security posture reviews and identify misconfigurations.
• Review cloud architectures and provide security recommendations.
• Implement encryption and data protection controls.
• Secure CI/CD pipelines and support DevSecOps practices.
• Review Infrastructure as Code for security risks.
• Implement security automation wherever possible.
• Work with engineering, DevOps and infrastructure teams to embed security into the development lifecycle.
• Establish security standards, policies and controls for AWS environments.
• Support compliance requirements and security audits.
• Mentor junior engineers and provide technical guidance.

Mandatory Technical Skills

Must Have

• 7+ years of overall IT/Security/Cloud experience
• Strong AWS Cloud Security experience
• Hands-on AWS security architecture
• AWS IAM
• IAM policies, roles, permissions and least privilege
• AWS networking security
• VPC, Security Groups and NACLs
• CloudTrail and security logging
• GuardDuty
• Security Hub
• KMS and encryption
• Vulnerability management
• Cloud security monitoring
• Incident response
• Security hardening
• Security architecture/design

Good to Have

• AWS Organizations / SCP
• Terraform / CloudFormation
• DevSecOps
• CI/CD security
• Docker/Kubernetes security
• SAST/DAST/SCA
• SIEM tools
• Python/Bash/PowerShell scripting
• CIS Benchmarks
• NIST
• ISO 27001
• SOC 2
• AWS security certifications

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats.

The Mission

You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com

A Senior Cybersecurity Engineer is responsible for safeguarding an organization’s IT infrastructure, applications, and data against cyber threats. With 5–10 years of experience, the role demands expertise in designing, implementing, and managing advanced security solutions, conducting risk assessments, and responding to incidents. Senior Engineers also mentor junior staff and contribute to strategic security planning.

Key Responsibilities

• Design, implement, and manage enterprise-level security solutions (firewalls, IDS/IPS, SIEM, endpoint protection).
• Conduct vulnerability assessments, penetration testing, and risk analysis.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Develop and enforce security policies, standards, and compliance frameworks (ISO 27001, NIST, GDPR).
• Collaborate with IT and business teams to integrate security into system architecture and processes.
• Lead incident response drills and disaster recovery planning.
• Provide guidance and mentorship to junior cybersecurity staff.
• Stay updated on emerging threats, tools, and technologies.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 5–10 years of proven experience in cybersecurity engineering or related roles.
• Strong knowledge of network security, cloud security (AWS, Azure, GCP), and endpoint protection.
• Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight), firewalls, and intrusion detection/prevention systems.
• Certifications such as CISSP, CISM, CEH, or OSCP are highly desirable.

Skills

• Advanced problem-solving and analytical skills.
• Strong communication and leadership abilities.
• Ability to manage complex projects and handle escalations effectively.
• Proactive mindset with adaptability to evolving cyber threats.

Strong Product Security Engineer / Security Engineer / Application Security Engineer / DevSecOps Engineer profiles

2

Mandatory (Experience 1) – Must have minimum 4+ years of hands-on Application/Product Security or Security Engineering experience,

3

Mandatory (Experience 2) – Strong hands-on experience in AWS Cloud Security, Infrastructure Security, and Application Security, with the ability to identify and address security risks at the application/code level.

4

Mandatory (Experience 3) – Must have hands-on experience in secure SDLC/DevSecOps, including code review, API security, CI/CD security automation, vulnerability management, VAPT/penetration testing, and security tooling.

5

Mandatory (Experience 4) – Must have hands-on experience with security audits and compliance frameworks, including SOC 2, GDPR, and ISO 27001, preferably having participated in or driven audits.

6

Mandatory (Experience 5) – Experience setting up, managing, and tracking security tools such as MDM, endpoint agents, security monitoring/scanning tools, secrets/access management, and related security tooling.

7

Mandatory (Experience 6) – Must demonstrate strong coding/development understanding with the ability to read/write code and assess security of APIs, applications, databases, and distributed systems; not just operate security tools.

8

Preferred (Experience 1) – Relevant security certifications such as CISSP, CEH, OSCP, or equivalent.

WowPe is a leading fintech company revolutionizing the way businesses handle financial transactions. Our suite of innovative products includes a secure Payment Gateway for seamless online transactions, robust Payouts solutions to streamline bulk payments, and a versatile Point of Sale (POS) system for efficient in-store transactions. At WowPe, we’re dedicated to providing user-friendly, scalable, and reliable solutions that empower businesses to grow and succeed in today’s fast-paced digital economy.

We are looking for a highly skilled Cloud Infrastructure & Cloud Network Engineer to design, build, and manage secure, scalable hybrid cloud environments at WowPe. This role will focus on cloud networking, hybrid connectivity, infrastructure automation, security, reliability, and performance across on-prem and cloud platforms (AWS/Azure). You will play a critical role in ensuring high availability, security, and performance of our fintech platforms.

A Day in the Life

• Design and review cloud network architectures (VPC/VNet, routing, segmentation)
• Troubleshoot latency, connectivity, VPN, and performance issues
• Work with DevOps and application teams to support deployments and scalability
• Automate infrastructure provisioning and security guardrails
• Monitor network health, traffic flow, and system performance
• Ensure security, compliance, and disaster recovery readiness
• Support hybrid connectivity between on-prem data centers and cloud environments.

Key Responsibilities

Cloud Networking & Hybrid Architecture

• Design and implement VPC/VNet architectures, subnetting, routing tables, NAT, gateways, and secure segmentation
• Build and manage hybrid connectivity between on-prem data centers and cloud using Site-to-Site VPN, ExpressRoute, Direct Connect
• Configure and manage Layer 4 & Layer 7 load balancers for high availability and traffic distribution
• Architect DNS, CDN, and edge networking strategies for low-latency global access

Security & Zero-Trust

• Implement Zero-Trust networking using security groups, NACLs, identity-aware proxies, mTLS
• Design secure access controls and network isolation
• Work closely with security teams to ensure PCI, ISO, SOC compliance readiness

Automation, Platform & Reliability

• Automate infrastructure provisioning using Infrastructure as Code (Terraform/ARM/CloudFormation)
• Build self-healing, auto-scaling architectures with health checks and fault tolerance
• Support and manage Kubernetes clusters (EKS/AKS) including networking and service communication
• Integrate infra with CI/CD pipelines for safe and frequent deployments

Operations & Observability

• Perform advanced troubleshooting for latency, packet loss, MTU, routing loops
• Implement and manage monitoring, logging, and observability (Prometheus, Grafana, ELK, Azure Monitor, CloudWatch)
• Design and maintain disaster recovery architectures, multi-region networking, and replication strategies
• Ensure high availability, performance optimization, and cost efficiency

Basic Qualifications & Skills

• 4+ years of experience in Cloud Infrastructure & Cloud Networking
• Strong hands-on experience with AWS and/or Azure
• Deep understanding of VPC/VNet, routing, NAT, gateways, load balancers, DNS
• Experience with Hybrid connectivity (VPN, ExpressRoute, Direct Connect)
• Solid knowledge of network security, firewalls, access control, segmentation
• Hands-on experience with Infrastructure as Code (Terraform preferred)
• Experience in monitoring, troubleshooting, and incident handling
• Strong understanding of high availability, DR, and performance optimization

Preferred Qualifications

• Experience in fintech, BFSI, or high-compliance environments
• Exposure to Zero-Trust architecture and security best practices
• Experience with Kubernetes (EKS/AKS), service mesh, microservices networking
• Familiarity with CI/CD pipelines and DevOps practices
• Knowledge of CDN, edge networking, and global traffic management
• Experience with compliance frameworks (PCI-DSS, ISO 27001, SOC2)
• Ability to design large-scale, resilient, production-grade architectures

Cloud Expertise(Azure):

• Strong understanding of cloud services and resources like AI services, webapp, database, including monitoring tools like Azure Monitor and Log Analytics.

• Experience with Infrastructure as Code (IaC) tools such as Arm template / Bicep/Terraform.

• Deep understanding of Networking concepts(DNS, DHCP , Hub and Spoke).

• Understanding on policies and security aspects of cloud.

Kubernetes & Helm:

• In-depth knowledge of Kubernetes concepts such as pods, services, ingress, config maps, and secrets.

• Understand of Kubernetes templates and its deployment.

• Proficiency with Helm/ Kustomize or equivalent for Kubernetes package management and deployment automation.

• Implement Kubernetes best practices, including security, networking, and scaling.

• Concepts of Docker and Containers

CI/CD & Programming:

• Hands-on experience with YAML-based CI/CD pipelines (e.g., Azure DevOps, GitHub Actions).

• Familiarity with scripting and automation tools such as PowerShell, Azure CLI, or Bash.

• Proven skill in python programming and concepts.

Monitoring and Observability:

Expertise in creating and managing Grafana dashboards for visualizing metrics and logs.

• Knowledge of Log Analytics & Azure Application Insights for performance monitoring and tracing.

Job Description:

• Infrastructure Management: Design, implement, and manage scalable, reliable, and secure cloud infrastructure using AWS, GCP, and/or Azure.
• CI/CD Pipelines: Develop and maintain continuous integration and continuous deployment (CI/CD) pipelines to streamline the development lifecycle.
• Automation: Automate infrastructure provisioning, configuration management, and application deployment processes.
• Monitoring and Performance: Implement monitoring, logging, and alerting solutions to ensure system health, performance, and reliability.
• Security: Ensure the security of cloud infrastructure and applications, including identity management and compliance with industry standards.
• Collaboration: Work closely with client and development teams to integrate DevOps practices and deliver high-quality software.
• Documentation: Maintain comprehensive documentation of infrastructure, configurations, and processes.
• Innovation: Stay current with emerging technologies and industry trends, integrating them into the DevOps strategy as appropriate.

Qualifications: 

• Education: Bachelor's degree in Computer Science, Information Technology, or a related field.
• Experience: 7 - 10 years of overall experience with relevant experience of at least 7 years in DevOps and served as a lead or senior engineer.

Job Title: AppSec / AI Security Engineer

Employment Type: Full-time/ Permanent

Location: Indore (Work from Office)

About the Role

We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.

If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

Key Responsibilities

• Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
• Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
• Develop structured code review workflows incorporating specifications, scan results, and code provenance.
• Optimize security scanning tools to reduce false positives and drive developer adoption.
• Investigate and manage security findings using established remediation and documentation processes.
• Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
• Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.

Required Skills & Experience

• Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
• Experience implementing automated security scanning and enforcement — not just operating existing tools.
• Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
• Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
• Ability to design, build, and own security automation and governance solutions from the ground up.
• Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
• Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
• Strong analytical mindset and ability to independently assess security risk across internal and external codebases.

Preferred Qualifications

• ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
• Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
• Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
• AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
• Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
• Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).

About Company:

Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.

For more info, please visit our website:  https://5exceptions.com

Job Description: Lead - Cloud Engineering (AWS / Azure)

Role Title: Lead - Cloud Engineering

Experience Level: 10+ Years

Domain Focus: Healthcare AI & Cloud Infrastructure

Location: Remote

Job Overview

We are seeking an experienced Lead - Cloud Engineering with over 10 years of IT experience to lead our cloud strategy, architecture, and infrastructure teams. In this role, you will oversee end-to-end cloud deployment, multi-cloud migration, and scalable architecture designed to support cutting-edge Generative AI applications in the healthcare technology domain.

The ideal candidate brings deep technical expertise in both AWS and Azure, strong hands-on capability in cloud infrastructure, and proven leadership experience driving security, compliance, and team growth.

Key Responsibilities

Cloud Architecture & Migration

• Lead the architecture, design, and execution of cloud migrations, deployments, and modernizations across AWS and Azure environments.
• Drive Infrastructure as Code (IaC) standards using Terraform, CloudFormation, or Bicep to ensure scalable, automated infrastructure provisioning.
• Build high-availability, low-latency architectures optimized for data-intensive Generative AI and Machine Learning workloads.

Security & Healthcare Compliance

• Enforce healthcare security standards including HIPAA, HITRUST, SOC 2, and data governance best practices across all cloud assets.
• Implement Zero-Trust security, Identity Access Management (IAM), data encryption key management, and continuous vulnerability monitoring.

Leadership & Team Management

• Manage, mentor, and scale a high-performing team of DevOps, Cloud, and SRE Engineers.
• Drive Agile workflows, sprint planning, incident response frameworks, and SLA compliance.
• Collaborate closely with Data Engineering, AI/ML, and Software Product teams to align infrastructure with business roadmaps.

Operations & FinOps

• Establish cloud cost optimization strategies (FinOps) to manage computing costs associated with AI models and large-scale data processing.
• Manage monitoring, alerting, and telemetry frameworks (e.g., Prometheus, Datadog, CloudWatch) to ensure 99.99% uptime.

Key Requirements

• Experience: 10+ years of overall IT experience with at least 5+ years in a cloud leadership or lead architect role.
• Cloud Platforms: Advanced hands-on expertise with both AWS (e.g., EC2, S3, EKS, Bedrock, SageMaker) and Azure (e.g., AKS, Azure OpenAI, Blob, Virtual Machines).
• DevOps & IaC: Strong background in Terraform, Docker, Kubernetes, CI/CD pipelines (GitHub Actions, GitLab CI, or Jenkins).
• Domain Knowledge: Prior experience building or managing cloud environments within Healthcare, Life Sciences, or HealthTech is strongly preferred.
• AI/ML Familiarity: Experience supporting cloud infrastructure for machine learning pipelines, LLM deployments, or GPU compute management.
• Certifications (Preferred): AWS Certified Solutions Architect – Professional, Azure Solutions Architect Expert, or Certified Kubernetes Administrator (CKA).

About Searce

Searce is a global, AI-native, engineering-led technology consultancy and a Premier Google

Cloud Partner — recognized as the Google Cloud Workplace AI Transformation Partner of the

Year, APAC (2026). With 20+ years of experience and 3,000+ clients across 10+ countries, we

help businesses stay ahead of the cloud curve.

The Role

We're looking for a Lead Cloud Security & Reliability Engineer with deep GCP expertise to own

end-to-end cloud reliability and security forAPAC enterprise clients. As Lead, you'll set the architectural direction, mentor your squad, and drive measurable client outcomes across multi-

cloud environments.

What You'll Do

Own Client Delivery — Lead 24x7 GCP cloud operations forAPAC clients. Define SLO frameworks and ensure adherence.

Architect Solutions — Design scalable, secure GCP-primary architectures with multi-cloud awareness.

Drive Reliability — Lead incident response, RCA, and long-term remediation across production systems.

Mentor & Elevate — Coach and grow a squad of Senior CSREs.

Drive FinOps — Own cloud cost governance and optimization with quantified impact.

Be the Expert — Represent Searce's technical depth in global client conversations.

What We're Looking For

Experience

7–12 years total with 5+ years on GCP cloud infrastructure

Strong background in Cloud Managed Services / MSP environments

Proven experience leading a team in client-facing delivery

Multi-cloud exposure (AWS/Azure secondary) preferred

Technical Skills (Must-Have)

• GCP: GKE, IAM, VPC, Cloud Monitoring, Stackdriver, KMS — demonstrated in work
• experience
• Kubernetes: GKE — production cluster management, Helm
• IaC: Terraform — module-level, reusable frameworks
• Observability: Prometheus, Grafana, Thanos or equivalent
• Security: IAM, Zero-trust, DevSecOps, CSPM tools
• Scripting: Python or Go
• FinOps: GCP cost governance demonstrated

Nice to Have

• GCP Professional Cloud Architect / Pro DevOps Engineer certification
• AWS / Azure secondary experience
• CKA (Certified Kubernetes Administrator)
• ITIL / change management awareness
• APAC client delivery experience

Why Searce?

🏆 Google Cloud Partner of the Year — APAC 2026

🌍 Work with APAC enterprise clients across multiple industries

🤖 AI-first, engineering-led culture

📈 Lead-level ownership with real career growth

🤝 HAPPIER values — Humble, Adaptable, Positive, Passionate, Innovative, Excellence,

Responsible