Grid Dynamics - Senior Cloud & Application Security Engineer in Chennai, भारत

Position Overview :We are seeking an experienced Senior Cloud & Application Security Engineer to join our Cybersecurity team. In this role, you will play a critical part in protecting our cloud infrastructure, network architectures, and software applications. You will be responsible for end-to-end application security testing, threat detection, network-level troubleshooting, and cloud security governance across AWS and multi-cloud https://jobeax.com/link/72xljNf4GfrhBYcv Qualifications & Technical Skills :- Application Security: Hands-on experience with Veracode (SAST/DAST/SCA), Qualys TotalAppSec, Burp Suite, ZAP, Nessus, OpenVAS, and Nmap.- AWS Security Infrastructure: Deep understanding of AWS networking/security services (VPC, Site-to-Site VPN, GuardDuty, Macie, Config, SecurityHub, Inspector, IAM, S3, KMS, Secrets Manager, Certificate Manager).- Network & Packet Troubleshooting: Expertise in network components (NAT, Bastion, Security Groups, ACLs, CloudTrail) and deep packet analysis via Wireshark / tcpdump.- WAF & Edge Security: Expertise with AWS WAF, Cloudflare WAF, Bot Management, and Rate Limiting.- SecOps & Endpoint Security: Operational knowledge of SIEM, EDR, and Malware Protection configuration and threat monitoring.- Automation: Proficiency in Python for security scripting, API integrations, and https://jobeax.com/link/F2cID0bJnwLTAxqi Certifications :- AWS Certified Security Specialty (Highly Preferred)- CompTIA Security+- Certified Ethical Hacker (CEH)- Equivalent certifications such as CISSP, OSCP, or GIAC (GSEC/GCIH) are a https://jobeax.com/link/eLblzG3b6ru5h1C0 Responsibilities :1. Application & Software Security (AppSec) :- Implement, manage, and optimize Veracode platform capabilities, including SAST, DAST, and Software Composition Analysis (SCA).- Conduct authenticated security scans using Qualys TotalAppSec, analyze detailed vulnerability reports, prioritize risks, and collaborate directly with engineering teams to guide remediation.- Perform manual and automated application vulnerability analysis and penetration testing using tools such as Burp Suite, OWASP ZAP, Nessus, OpenVAS, and Nmap.- Manage Edge and Layer 7 security using AWS WAF and Cloudflare WAF, defining and maintaining rate-limiting rules, bot management policies, and custom firewall configurations.2. Cloud & Network Security Architecture :- Design, configure, and manage secure AWS network architectures involving VPCs, Security Groups, Network ACLs, NAT Gateways, Bastion Hosts, and Site-to-Site VPNs.- Administer AWS security governance, monitoring, and compliance tooling, including Security Hub, GuardDuty, Macie, Config, Inspector, and CloudTrail.- Implement and audit identity and data protection standards using AWS IAM, S3, KMS, Secrets Manager, and AWS Certificate Manager (ACM).- Configure network-level logging, analyze network traffic, and troubleshoot complex routing or security issues.- Perform dynamic packet analysis using Wireshark, tcpdump, and packet inspection tools to diagnose complex network/security anomalies.3. Security Operations & Automation :- Maintain operational visibility into Malware Protection, SIEM, and Endpoint Detection and Response (EDR) platforms (configuration, monitoring, and incident investigation).- Develop continuous automation scripts in Python to streamline repetitive security operations, automate report generation, and integrate security workflows. (ref:hirist.tech)