Improve security of container images and virtual machines through secure base images, automated upgrades, and vulnerability remediation.
Triage Wiz and other cloud-security findings, validate exploitability, identify root causes, and reduce recurring security issues.
Build scripts, integrations, guardrails, dashboards, and automated remediation workflows for cloud-security problems.
Define and report metrics covering external exposure, IAM risks, Kubernetes issues, unhealthy VMs and container images, remediation aging, and recurrence.
Support cloud incident investigations through attack-path analysis, evidence collection, blast-radius assessment, containment guidance, and corrective controls.
Represent Product Security in technical discussions, communicate risk and trade-offs, influence teams without direct authority, mentor engineers, and develop reusable security patterns.
Requirements
At least 5 years of experience in security, infrastructure, platform engineering, or a related technical field, including at least 4 years of hands-on cloud-security experience.
Deep practical production experience with AWS and GCP.
Strong knowledge of Kubernetes, containers, Linux, virtual machines, cloud networking, storage, secrets management, encryption, and logging.
Hands-on expertise with cloud IAM, including AWS IAM, GCP service accounts, workload identity, federation, policy evaluation, and least-privilege design.
Experience reviewing or developing Terraform and integrating security controls into CI/CD workflows.
Experience using a CSPM platform such as Wiz to investigate and prioritize risk, with the ability to validate technical impact beyond tool output.
Ability to automate security workflows using Python, Go, APIs, or similar technologies.
Strong understanding of cloud attack techniques, privilege escalation, lateral movement, internet exposure, data exfiltration, and workload isolation.
Demonstrated ability to independently own ambiguous problems and drive cross-functional remediation to measurable completion.
Excellent written and verbal English communication skills, including the ability to explain technical risk and remediation to engineers and leaders.
Experience mentoring engineers or leading technical initiatives across multiple teams is strongly preferred.
Relevant certifications such as AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, CKS, CISSP, or equivalent practical experience are desirable.
Benefits
Group medical, personal accident, and term life insurance.
Preventive healthcare coverage for dental, vision, and OPD needs, plus mental health support.
... Harsco globally. We have been operating since 2008 & serving 30+ Countries Job Description About the Role - The Senior Security Engineer is the enterprise security Subject Matter Expert (SME) for identity, messaging, authentication, monitoring and security integrations. The role provides strategic security input, develops ...
... CNAPP/CSPM tooling, SIEM or detection engineering, AI security research, open-source tools, or CTFs. Benefits - Work on production agentic AI systems and make security a core product feature. - Partner directly with Security, Compliance, Engineering, and Product leadership with substantial ownership. - Individual-contributor ...
... Friday. We are looking to hire a Senior Security Engineer to own GLG's threat detection and incident response capability during US business hours. This is a senior individual contributor role, reporting to Nick Franzi. The successful candidate will be the firm's primary subject matter expert for detection engineering, security ...
... contribute more deeply to incident response, detection engineering, threat intelligence, and security improvement initiatives. Responsibilities Key Responsibilities Security Monitoring - Security Tool Design and Development: -Plans and performs in-depth security assessments across a variety of products and services to identify potential ...
... across Vultr’s global security operations. We are seeking Senior Security Engineers to own escalated investigations and lead incident response across Vultr’s security surface — SIEM, threat detection, identity and access, and endpoint/cloud telemetry. This is a deep-dive role for experienced security operators who lead investigations, ...
... Inc. it’s about each person bringing skills and passion to a challenging and constantly evolving game. WHO WE ARE LOOKING FOR As our Senior SAP Application Security Engineer in NIKE ITC, your role on the team will be to lead the execution of a compelling and competitive application security strategy and drive engineering ...
... team ships. This is a hybrid engineering and security seat built for someone who is genuinely both: you ship products alongside the engineering team when the security queue is quiet, and you own security work end to end when it lands. You report into engineering and partner closely with the Payward security, CISO, and compliance ...
Medtronic seeks a Senior Product Security Engineer to integrate cybersecurity throughout the product lifecycle for medical devices and connected healthcare solutions. The role involves conducting security assessments, threat modeling, vulnerability management, and compliance activities across Class I-III devices while collaborating ...
Join SolarEdge as a Senior Cyber Security Engineer, where you will play a pivotal role in safeguarding our systems and data. Leverage your expertise to implement advanced security measures and ensure compliance with industry standards. Location: Bangalore / Hybrid (as applicable) Experience: 5+ Years Education: B.E./B.Tech ...
... dreamers and builders in the world. We’re looking for a Senior Product Security Engineer who is passionate about building secure guardrails and paved roads for engineering teams. As a member of the Security Engineering team, you will report to the Manager of Security Engineering. You will drive coordination over our AppSec ...