AWS & Application Security Engineer

Anchanto; Pune District; Presencial; INR 2.500.000 - 4.200.000; Jornada completa

Descripción de la vacante

Anchanto is seeking an AWS & Application Security Engineer in Pune with 5+ years of hands-on experience. You will conduct security assessments across web/mobile apps and AWS infrastructure, review cloud resources, and implement AWS security services like GuardDuty, Security Hub, WAF, and IAM.

You will automate security controls with Ansible and contribute to audit readiness and secure SDLC practices. Ideal candidates have strong Linux administration skills, experience with Docker/Kubernetes

Formación

• Security assessments, VAPT of web/mobile apps and AWS infra.
• AWS security services and CIS benchmarks knowledge.
• Linux admin, server hardening, and network security fundamentals.
• Experience with audits and security reporting, with strong documentation.

Responsabilidades

• Conduct security assessments, VAPT, and penetration testing of web/mobile apps, AWS infra, and networks.
• Review AWS accounts, VPCs, EC2, EKS, RDS, S3, Load Balancers, and serverless services.
• Implement and manage AWS security services such as GuardDuty, Security Hub, IAM, WAF, and Shield.
• Perform cloud security posture checks and CIS benchmark alignment.
• Identify vulnerabilities and remediation gaps; drive fixes with teams.
• Develop Ansible playbooks for security automation and deployments.
• Prepare VAPT reports, risk assessments, and audit checklists.
• Coordinate with engineering/infrastructure to remediate findings on time.
• Support OWASP best practices and secure SDLC initiatives.
• Carry out Linux hardening and ongoing infrastructure security reviews.

Conocimientos

AWS Security

Application Security

VAPT

Linux admin

Container security

Security testing tools

Herramientas

Burp Suite Pro

Nessus

Qualys

Acunetix

Netsparker

Metasploit

WebInspect

Nmap

Docker

Kubernetes

GuardDuty

Security Hub

CloudTrail

WAF

IAM

Config

Descripción del empleo

AWS & Application Security Engineer

Experience: 5+ Years
Location: Pune,India

Job Role Pointers:

• Conduct security assessments, VAPT, and penetration testing of web applications, mobile applications, AWS infrastructure, and networks.
• Perform security reviews of AWS accounts, VPCs, EC2 instances, EKS clusters, RDS databases, S3 buckets, Load Balancers, and serverless services.
• Implement and manage AWS security services such as GuardDuty, Security Hub, AWS Config, Inspector, CloudTrail, WAF, Shield, and IAM.
• Conduct regular cloud security posture assessments and identify misconfigurations against AWS security best practices and CIS benchmarks.
• Identify security vulnerabilities, misconfigurations, and compliance gaps, and drive remediation efforts.
• Hands-on experience with Ansible Automation for server provisioning, configuration management, security hardening, patch management, and compliance enforcement.
• Develop and maintain Ansible playbooks for automating security controls, vulnerability remediation, user access management, and AWS infrastructure deployments.
• Perform and support internal/external security audits and compliance assessments.
• Prepare security test cases, audit checklists, VAPT reports, and risk assessment reports.
• Coordinate with engineering and infrastructure teams to remediate findings within defined timelines.
• Implement OWASP security best practices and support secure SDLC initiatives.
• Perform Linux server hardening and infrastructure security reviews.
• Support firewall, network security, cloud security monitoring, and incident response activities.

Required Skills

• Strong hands-on experience in AWS Security, Application Security, and VAPT.
• Hands-on experience with AWS Security Hub, GuardDuty, Inspector, CloudTrail, Config, WAF, Shield, Secrets Manager, and KMS.
• Experience securing containerized environments such as Docker and Kubernetes
• Expertise with tools such as Burp Suite Pro, Nessus, Qualys, Acunetix, Netsparker, Metasploit, WebInspect, and Nmap.
• Experience with OWASP Top 10, secure coding practices, and cloud security controls.
• Good understanding of Linux administration, server hardening, and network security.
• Experience participating in at least two security audits, with one conducted in the last 12 months.
• Excellent analytical, documentation, and communication skills.

Preferred

• Experience in SaaS, e-commerce, or product-based organizations.
• Certifications such as AWS Security Specialty, CISM, or ISO 27001 Lead Auditor.