Cyber Security

Cyber StrategiX; India; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Cyber StrategiX is seeking a DevSecOps/AWS Security Engineer to implement and maintain security controls across AWS cloud, applications and DevOps environments, embedding security into SDLC and CI/CD pipelines.

You will monitor findings from Security Hub, GuardDuty, Inspector, CloudTrail and drive remediation with Development and DevOps teams, review configurations, support SAST/DAST, API security and secrets management.

Qualifications

• Strong understanding of IAM, RBAC and least-privilege access controls.
• VPC, network segmentation, firewalls and IDS/IPS experience preferred.
• Hands-on vulnerability management and VAPT remediation experience.
• Strong knowledge of OWASP Top 10, web app security and API security.
• Experience with SAST, DAST, SCA/dependency scanning and security tooling.
• CI/CD security and DevSecOps practices.

Responsibilities

• Implement and maintain security controls across AWS cloud, apps and DevOps environments.
• Embed security practices into SDLC and CI/CD pipelines (DevSecOps).
• Monitor findings from AWS Security Hub, GuardDuty, Inspector, CloudTrail and remediate with Dev/DevOps teams.
• Perform vulnerability assessment, coordinate VAPT and drive remediation.
• Support security across WAF, IAM, network security, and least-privilege policies.
• Review configurations for security risks and misconfigurations.
• Support SAST/DAST, dependency scanning, container/image scanning and SBOM awareness.
• Review app/API security against OWASP Top 10.

Skills

IAM & RBAC

VPC & Network security

Vulnerability management & VAPT

OWASP Top 10 & API security

SAST/DAST/SCA scanning

CI/CD security & DevSecOps

Docker/container security

Linux security/hardening

Encryption & TLS & key management

SBOM & software supply chain

Scripting for automation (Python/Bash)

Job description

JD :

Implement and maintain security controls across AWS cloud infrastructure, applications and DevOps environments. Embed security practices into the SDLC and CI/CD pipelines following DevSecOps principles. Monitor and manage security findings from AWS Security Hub, GuardDuty, Inspector, CloudTrail and related security services. Perform vulnerability assessment, coordinate VAPT, analyze findings and drive remediation with Development and DevOps teams. Support implementation and management of WAF, IAM, network security, security groups, access controls and least-privilege policies. Review cloud infrastructure and application configurations for security risks and misconfigurations. Support SAST, DAST, dependency scanning, container/image scanning and software composition analysis within the development lifecycle. Review application and API security against OWASP Top 10 and API security best practices. Support security hardening of Linux servers, containers and cloud workloads. Monitor security events and support investigation and response to security incidents. Implement and review secrets, credentials, certificates and privileged-access management practices. Track vulnerabilities and ensure remediation within defined security SLAs. Support security assessments, customer security questionnaires, VAPT evidence and compliance/audit requirements. Work closely with Development, QA, DevOps and Product teams to incorporate security requirements from design through production. Maintain security documentation, standards, procedures, risk registers and remediation evidence. Continuously evaluate emerging threats and recommend improvements to the organization’s security posture. Strong understanding of AWS cloud security architecture and security best practices. Hands-on experience with AWS Security Hub, GuardDuty, Inspector, CloudTrail, IAM and WAF.

Key technical Skills Required :

• Strong understanding of IAM, RBAC, least privilege and privileged-access controls.
• Knowledge of VPC, Security Groups, network segmentation, firewalls, IDS/IPS and network security.
• Hands-on experience with vulnerability management and VAPT remediation.
• Strong knowledge of OWASP Top 10, web application security and API security.
• Experience with SAST, DAST, SCA/dependency scanning and security scanning tools.
• Understanding of CI/CD pipeline security and DevSecOps practices.
• Knowledge of Docker/container security and Linux security/hardening.
• Understanding of encryption, TLS, key management, secrets management and data protection.
• Familiarity with SIEM, security logging, monitoring and incident response.
• Basic scripting capability using Python, Bash or similar scripting languages for security automation.
• Understanding of SBOM and software supply-chain security is preferred