Security Engineer

Must-haves

● Hands-on AWS security: IAM, GuardDuty, Security Hub, CloudTrail, Config, KMS,

VPC/security groups, WAF

● Strong Python (or Go/Node) for security automation and API integrations

● Implementing security in CI/CD: SAST, DAST, dependency/container scanning,

secrets detection, SBOM

● Alert triage, log analysis, and root cause analysis for security incidents

● Terraform/CloudFormation with policy-as-code

● Validating VAPT findings and verifying fixes

Responsibilities

● Build automation for log analysis, alert enrichment, access reviews, and continuous

control and policy-enforcement checks

● Automate audit evidence collection mapped to CSCRF controls

● Provide technical input to Cyber, System, and VAPT audits and close technical

observations

● Work with development teams on secure coding and remediation

Good to have

● Prior exposure to SEBI CSCRF or BFSI regulatory environments

● Frontend knowledge of react or angular