Description

Lead security engineering for cloud and application layers, owning automation frameworks, threat detection, and secure SDLC integration.

This role is on-site.

Responsibilities

• Design and implement security automation frameworks for threat detection, remediation, and compliance validation.
• Operate and improve SentinelOne EDR/XDR and SIEM workflows for automated detection, alert triage, and response.
• Integrate SAST, DAST, SCA, and IaC scanning into CI/CD pipelines to enforce secure SDLC practices.
• Configure Reblaze WAF for DDoS/bot protection and lead VAPT for web, mobile, and agentic AI platforms.
• Secure multi-cloud environments (GCP/AWS) using IAM, CSPM, CASB, DLP, and Zero Trust policies.

Required Skills

• 8+ years in application, cloud, or product security engineering.
• Deep knowledge of Web Application Security, OWASP Top 10, and secure SDLC.
• Cloud security fundamentals: IAM, key management, configuration monitoring in GCP/AWS.
• CI/CD security integration: SAST/DAST/SCA/IaC scanning, secure code review, threat modeling.
• Detection and response: SIEM telemetry, EDR/XDR signals, threat intelligence, incident response, digital forensics.

Preferred Skills

• Python for security automation and tooling.
• B.Tech degree.

Key Skills

Education

Any Graduate