Lead Security Engineer

Cvent; Gurugram District, Bengaluru; Hybrid; INR 3,000,000 - 6,000,000; Full time

Job summary

Cvent is seeking a Lead Site Reliability Engineer for the SRE Security team in Gurugram to mentor peers and drive DevSecOps initiatives. You will work with product teams, Information Security, and Cloud Automation to ensure secure, scalable platforms and strong incident response.

The role emphasizes automation, blameless postmortems, and continuous improvement in a dynamic, distributed environment. Strong hands-on AWS, scripting, and CI/CD experience are essential.

Qualifications

• 7–12 years of hands-on Site Reliability Engineering experience with ownership of reliability, security, and operational excellence at scale.
• Excellent communication and alignment skills across multi-disciplinary teams.
• Hands-on AWS WAF, including rule authoring, rate-based rules, bot control, and sharing strategies.
• Experience designing DDoS protection with AWS Shield Advanced and observability (Lambda, CloudWatch).
• Bot mitigation using AWS Bot Control, token-based traffic classification, JA4+ASN fingerprinting, and third-party vendors.
• AWS services management and IaC using CloudFormation or CDK; automation in CI/CD pipelines.
• Strong scripting ability (TypeScript, JavaScript, Python, Ruby, Bash).
• Familiarity with Agile SDLC and incident management, RCA, and change management.
• AI-assisted workflow automation and understanding of LLM integrations for runbooks and post-mortems.

Responsibilities

• Enlighten, enable and empower multi-disciplinary teams across applications and locations.
• Tackle complex development, automation and business process problems; champion Cvent standards and practices.
• Ensure scalability, performance, and resilience of security-related systems and processes.
• Collaborate with product development, Information Security, Cloud Automation and SRE teams on security concerns.
• Identify recurring problems and anti-patterns in development, operations and security.
• Develop build, test and deployment automation for multiple on-premises and AWS regions.
• Contribute to Open-Source projects and internal tooling.

Skills

SRE leadership

AWS WAF

DDoS protection

CloudFormation / CDK

Jenkins / CI/CD

Incident management

RCA & postmortems

Automation / IaC

Python / Bash / JS

AI-powered automation

Security vulnerability management

Job description

Site Reliability is about combining development and operations knowledge and skills to help make the organization better. Whether you have a development background and are interested in learning more about operations and security or have an operations or security background and are interested in developing internal tools and automation - Cvent SRE can benefit from your skillsets. Ultimately, we are looking for passionate people who love learning, love technology and always want to make things better.

As a Lead SRE on the SRE Security team, you will be responsible for mentoring others and helping Cvent to both envision and achieve our DevSecOps goals. We are looking for someone with the drive, ownership and ability to take on challenging problems, both technical and process related, in a dynamic, collaborative and highly distributed, multi-disciplinary team environment. You will use your background as a generalist to work closely with product development teams, Information Security, Cloud Infrastructure and other SRE teams to ensure the effective and efficient maintenance of our platforms' security. You must be able to see the big picture and work collaboratively with teams to solve hard multi-disciplinary problems.

Technical expertise in topics such as cloud operations, the software development lifecycle, and security vulnerability management will be of great help to you. However, excellent soft skills in mentorship, communication and the ability to drive alignment are must haves. We use SRE principles such as blameless postmortems and a focus on automation to ensure we're constantly improving our knowledge and maintaining a good quality of life.

Overall, we're passionate about continuous improvement, learning and participating in dynamic day to day work where success is rewarded with recognition and upward mobility.

In This Role, You Will:

• Enlighten, Enable and Empower a fast-growing set of multi-disciplinary teams, across multiple applications and locations.
• Tackle complex development, automation and business process problems. Champion Cvent standards and best practices.
• Ensure the scalability, performance, and resilience of security related systems and processes.
• Work with product development teams, Information Security, Cloud Automation and other SRE teams to ensure a holistic understanding of security concerns and their effective and efficient identification and resolution.
• Identify recurring problems and anti-patterns in development, operational and security processes.
• Develop build, test and deployment automation that seamlessly targets multiple on-premises and AWS regions.
• Give back by working on and contributing to Open-Source projects.

What we are looking for:

Must Have Skills:

• 7-12 years of hands-on experience in Site Reliability Engineering with a demonstrated track record of owning reliability, security, and operational excellence at scale in production environments.
• Excellent communication skills and a track record of driving alignment across multi-disciplinary teams.
• A passion for and track record in making things better for your peers.
• Hands-on experience with AWS WAF including rule authoring, rate-based rules, bot control integration, WAF rule group management, and multi-product WAF sharing strategies (e.g., managing WAF rule limits across applications sharing the same WebACL).
• Experience designing and implementing DDoS protection using AWS Shield Advanced including transitioning endpoints from count to block mode, building observability solutions (Lambda + CloudWatch alarms), and selfservice enablement for product teams.
• Experience with bot mitigation strategies including AWS Bot Control, silent challenge / token-based traffic classification (verified humans, verified bots, unknown traffic), JA4+ASN fingerprinting, and evaluation of thirdparty bot mitigation vendors (e.g., Datadome).
• Experience managing AWS services and operational knowledge of running applications in AWS ideally via automation and Infrastructure as Code (IaC) using CloudFormation or CDK.
• Strong understanding of CI/CD pipelines experience with Jenkins or equivalent, PR-based deployment workflows, build/test/deploy automation, and troubleshooting pipeline failures in distributed environments.
• Incident management experience able to act as IC, write clear incident summaries, drive RCA, and coordinate resolution across teams under pressure.
• Change management discipline ability to communicate changes proactively to stakeholders, document rollout strategies, and manage phased production deployments with rollback plans.
• Fluent in at least one scripting language such as TypeScript, JavaScript, Python, Ruby, or Bash.
• Experience with SDLC methodologies (preferably Agile).
• AI-assisted Workflow & Process Automation experience using or building AI-powered automations in operational contexts, such as automated incident summarization, alert enrichment, change risk assessment, or post-mortem drafting using LLM integrations (e.g., via MCP tools, Slack bots, or custom pipelines).
• AI & Automation Literacy (Must Have): Practical understanding and hands-on exposure to AI fundamentals as applied to SRE and operational workflows:
• Prompt Engineering ability to design effective prompts for LLMs to assist with incident analysis, RCA generation, runbook creation, and on-call triage.
• Retrieval-Augmented Generation (RAG) basic understanding of RAG patterns; ability to leverage or contribute to RAG-based internal tools that surface relevant runbooks, past incidents, and knowledge base articles during operational events.

Good to Have Skills:

• Disaster recovery planning and execution experience with multi-region failover, DR runbooks, and recovery time / recovery point objective (RTO/RPO) management.
• Experience managing CloudFront distributions, API Gateways, and ALBs as part of a layered security posture.
• Experience with APM, monitoring and logging tools (Datadog, New Relic, Splunk).
• Familiarity with security assessment tools and methodologies:
• Cloud Security Posture Management (CSPM)
• Infrastructure Vulnerability Scanning
• Static Code Analysis
• Software Composition Analysis (SCA)
• Static, Interactive and Dynamic Application Security Testing (SAST, IAST and DAST)
• Runtime Application Self Protection (RASP)
• Good understanding of containerization concepts Docker, ECS, EKS, Kubernetes.
• Experience managing 3-tier application stacks.
• Understanding of basic networking concepts.
• Familiarity with risk assessment and management concepts and practices.
• Experience with IaC tools such as CloudFormation, CDK (preferred), or Terraform.