Principal Security Engineer

GeoServe; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Geoserve Energy Transport is seeking a hands-on Principal Security Engineer to build, own, and run the organization’s information and application security function. This is a working leadership role — you will personally drive vulnerability management, penetration testing, and perimeter security, not just oversee it.

You’ll be the single point of accountability for the security posture of Geoserve's product suite and supporting infrastructure, reporting directly to the Head of Engineering.

Qualifications

• 8–12+ years in information security with 3–4 years in a leadership role.
• Hands-on experience running VAPT programs and vulnerability management at scale.
• Strong knowledge of OWASP Top 10, MITRE ATT&CK framework, and common exploit/defense techniques.
• Experience securing cloud environments, preferably AWS (Azure/GCP a plus).

Responsibilities

• Own end-to-end VAPT across web, API, mobile, network, and cloud with remediation tracking.
• Deploy and manage automated security tooling integrated into CI/CD pipelines.
• Maintain vulnerability inventory, risk register, and regular scanning cadence.
• Own perimeter and infrastructure security including firewalls, WAF, IDS/IPS, and IAM.
• Build incident detection and response capabilities (SIEM, runbooks).
• Develop security policies aligned with ISO 27001; ensure audit readiness.
• Report security posture to leadership and mentor the security team.
• Drive security awareness training across the organization.

Skills

VAPT program leadership

CI/CD security integration

OWASP Top 10

MITRE ATT&CK framework

AWS cloud security

DevSecOps practices

Education

Bachelor's degree in CS/Info Security

Master's degree (a plus)

Tools

SAST tooling

DAST tooling

SCA tooling

Container scanning tools

Security tooling in CI/CD

Job description

Geoserve Energy Transport is seeking a hands‑on Principal Security Engineer to build, own, and run the organization's information and application security function. This is a working leadership role — you will personally drive vulnerability management, penetration testing, and perimeter security, not just oversee it. You'll be the single point of accountability for the security posture of Geoserve's product suite and supporting infrastructure, reporting directly to the Head of Engineering.

Key Responsibilities

• Own end-to-end VAPT (penetration testing) across web, API, mobile, network, and cloud environments; manage vendors, validate findings, and drive remediation to closure with SLA-based severity tracking
• Deploy and manage automated security tooling (SAST/DAST/SCA, container scanning) integrated into CI/CD pipelines for shift‑left security
• Maintain vulnerability inventory, risk register, and regular scanning cadence across all assets
• Own perimeter and infrastructure security — firewalls, WAF, IDS/IPS, VPN, network segmentation, and AWS cloud security posture (IAM, encryption, logging)
• Build incident detection and response capability (SIEM, alerting, runbooks)
• Develop security policies aligned with ISO 27001; own audit/regulatory readiness for a maritime/energy logistics business
• Report security posture and risk to leadership; mentor and grow the security function
• Drive security awareness training org-wide

Required Qualifications

• Bachelor’s degree in computer science, Information Security, or related field (Master's a plus)
• 8–12+ years in information security, with at least 3–4 years in a security leadership role
• Demonstrated hands‑on experience running VAPT programs and vulnerability management at scale
• Strong working knowledge of OWASP Top 10, MITRE ATT&CK framework, and common exploitation/defense techniques
• Experience securing cloud environments (AWS strongly preferred; Azure/GCP a plus)
• Experience with CI/CD security integration and DevSecOps practices