Module Lead

Nest Digital; Ernakulam, Thiruvananthapuram, Coimbatore District; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

Nest Digital is seeking a senior security engineer to own IAM, PKI, and device certificate lifecycles for a live connected vehicle cloud platform in India. You will work with the customer's CA provider, perform vulnerability analysis, threat monitoring, and lead incident response to ensure platform resilience.

You will also conduct security reviews of releases across three scrum teams and compile compliance evidence with the customer's teams.

Qualifications

• 7-9 years in IT, with at least 4 years in security.
• AWS IAM, KMS, Security Hub, GuardDuty and WAF.
• PKI, X.509 certificates and mutual TLS.
• SAST and DAST tools.
• Hands-on incident response.

Responsibilities

• Own IAM, PKI and the device certificate lifecycle, working with the customer's certificate authority provider.
• Run vulnerability analysis and threat monitoring, and lead incident response.
• Carry out a security review of every release across all three scrum teams.
• Prepare compliance evidence with the customer's teams.
• Map certificate renewal dates and make sure none expire unnoticed.

Skills

IAM

PKI

X.509 certificates

Mutual TLS

Vulnerability analysis

Threat monitoring

Incident response

SAST/DAST

Compliance evidence

Education

BE/BTech

MTech

MCA

Tools

AWS IAM

KMS

Security Hub

GuardDuty

WAF

Job description

About the role

You will join a team taking over engineering and production support of a live connected vehicle cloud platform for a leading Indian automotive OEM. The platform serves multiple vehicle programmes on the road today, so reliability comes first. You will own security for the platform: identity, certificates, threat monitoring, release security reviews and compliance evidence.

What you will do

• Own IAM, PKI and the device certificate lifecycle, working with the customer's certificate authority provider
• Run vulnerability analysis and threat monitoring, and lead incident response
• Carry out a security review of every release across all three scrum teams
• Prepare compliance evidence with the customer's teams
• Map certificate renewal dates and make sure none expire unnoticed

What you will need

• 7- 9 years in IT, with at least 4 years in security
• AWS IAM, KMS, Security Hub, GuardDuty and WAF
• PKI, X.509 certificates and mutual TLS
• SAST and DAST tools
• Hands-on incident response

Good to have

• ISO/SAE 21434, UNECE R155 and AIS-140
• CISSP, CEH or AWS Security Specialty
• Connected vehicle or IoT security

Education

B.E. / B.Tech, M.Tech or MCA in Computer Science, IT or Electronics & Communication