Security Engineer II
Security Engineer with 3–5 years of experience responsible for end-to-end security across cloud (AWS, GCP) and on-prem infrastructure. Strong expertise in implementing security controls, managing identity and access, securing network architectures, and driving compliance initiatives.
Hands-on experience in cloud security, vulnerability management, incident response, and security automation. Capable of designing secure systems, enforcing best practices, and maintaining comprehensive documentation for audits and operational excellence.
Own and manage end-to-end security posture across AWS, GCP, and on-prem environments
Design and implement secure cloud architectures, including IAM, network security, and data protection
Define and enforce security best practices, policies, and standards
Manage identity and access controls (IAM), including least privilege and role-based access
Implement and monitor security tools (SIEM, EDR, CSPM, vulnerability scanners)
Secure infrastructure across compute, storage, networking, and Kubernetes environments
Collaborate with DevOps and engineering teams to embed security into CI/CD pipelines (DevSecOps)
Security Operations
Conduct vulnerability assessments, risk analysis, and remediation tracking
Handle incident response, including detection, triage, root cause analysis, and resolution
Monitor logs, alerts, and security events across environments
Ensure patch management and system hardening across cloud and on-prem systems
Perform periodic access reviews and audit checks
Compliance & Governance
Implement and maintain compliance with standards like ISO 27001, CIS Benchmarks, NIST, etc.
Support internal and external security audits and certifications
Maintain asset inventory, risk registers, and compliance documentation
Ensure adherence to data protection and privacy requirements
Documentation & Collaboration
Create and maintain security documentation, including:
Policies and standards
Runbooks and SOPs
Incident response playbooks
Audit and compliance reports
Work closely with engineering, ML, and platform teams to ensure secure deployments.
Communicate security risks and recommendations clearly to stakeholders
Requirements
Strong hands-on experience in cloud security (AWS & GCP)
Solid understanding of:
IAM, VPCs, firewalls, VPNs
Encryption (at rest & in transit)
Network security and segmentation
Experience with security tools (SIEM, vulnerability scanners, cloud security tools)
Knowledge of Linux systems and hardening practices
Familiarity with DevSecOps practices and CI/CD security
Good scripting skills (Bash/Python)
Good to Have
Experience with Kubernetes security (GKE/EKS)
Exposure to Terraform or Infrastructure as Code security
Knowledge of container security and image scanning
Experience with AI/ML infrastructure security or GPU workloads
Understanding of privacy frameworks and data governance
Soft Skills
Strong ownership and accountability for security posture
Excellent documentation and communication skills
Attention to detail with a proactive approach to risk management
Ability to work cross-functionally with engineering and product teams
Benefits
- Insurance Benefits - Medical Insurance, OPD Coverage, Accidental Insurance, Life Insurance.
- Wellness Program - Employee Assistance Program, Annual Health Check-Ups, Onsite Medical Centers, Emergency Support System.
- Parental Support - Maternity Benefit, Travel Reimbursement for Expectant Mothers during Last Trimester, Paternity Benefit, Day Care Support Program
- Mobility Benefits - Travel Policy, Relocation and Deputation benefits,
- Statutory Benefits - Employee PF Contribution, Gratuity, Leave Encashment
- Other Benefits – Unlimited Leave Policy, Professional Development Policy, Referral Bonuses, Internet and Telephone Allowance.