Security Engineer III in Bangalore, भारत

Responsibilities

• Secure AWS and GCP environments through IAM, network security, encryption, logging, and access controls.
• Perform application security reviews, vulnerability assessments, penetration-testing coordination, and remediation tracking.
• Integrate SAST, DAST, dependency, container, and infrastructure-as-code scanning into CI/CD pipelines.
• Secure Kubernetes, Docker, Terraform, Linux systems, and cloud infrastructure.
• Improve threat detection, security logging, alerting, incident response, and investigation processes.
• Identify, prioritize, and remediate vulnerabilities across applications, infrastructure, and dependencies.
• Support SOC 2, ISO 27001, customer security assessments, audits, and evidence collection.
• Build scripts and tools to automate security checks, reporting, and remediation.
• Investigate security incidents, perform root-cause analysis, and implement preventive measures.
• Partner with Engineering, DevOps, IT, and Product teams to embed security into everyday workflows.

Requirements

• 6–10 years of experience in information security, cloud security, application security, or DevSecOps.
• Strong hands-on experience with AWS and/or GCP security.
• Understanding of IAM, least-privilege access, secrets management, encryption, and network security.
• Experience integrating security tools into CI/CD pipelines.
• Familiarity with SonarQube, Snyk, Trivy, Checkov, Wiz, or equivalent tools.
• Working knowledge of Kubernetes, Docker, Terraform, GitHub Actions, Jenkins, or similar technologies.
• Knowledge of OWASP Top 10, common application vulnerabilities, and secure coding practices.
• Experience with vulnerability management, security incident response, and risk assessment.
• Scripting skills in Python, Bash, or similar languages.
• Understanding of SOC 2 or ISO 27001 requirements.

Benefits

• Equal opportunity employer that values diversity and prohibits discrimination on protected grounds.