Security Apps & Operations Engineer

RediMinds, Inc; Gurugram District; On-site; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Certification support

Learning allowance

Job summary

RediMinds, Inc in Gurugram is seeking a Security Apps & Operations Engineer to secure applications and cloud infrastructure, operate SIEM/SOC tooling, and embed DevSecOps across the SDLC. You will work with engineering, IT, and compliance to identify risks, respond to threats, and improve security posture in a rotational shift with US-hour overlap.

Responsibilities include integrating SAST/DAST/SCA into CI/CD, threat modeling, cloud IAM management, incident response, and building security

Qualifications

• 2–3 years of hands-on experience in application security or security operations.
• Bachelor's degree in Computer Science, Information Security, or equivalent.

Responsibilities

• Integrate security tooling into CI/CD pipelines and enforce security gates.
• Conduct vulnerability assessments and coordinate remediation.
• Perform threat modeling and security code reviews for new features and major changes.
• Maintain and improve application security standards, policies, and secure coding guidelines.
• Track and report on vulnerability metrics, SLA adherence, and risk exposure.
• Operate, tune, and maintain SIEM platforms (e.g., Splunk, Sentinel, Elastic).
• Develop dashboards and reports to surface key security metrics for stakeholders.
• Participate in on-call rotation for security incident response.
• Support audit activities (SOC 2, ISO 27001) by providing evidence and remediating findings.

Skills

Cloud security

SIEM/SOC tooling

DevSecOps

Threat modeling

Vulnerability management

Python/Bash scripting

Networking basics

Communication

Education

Bachelor's degree in CS/InfoSec

Tools

Splunk

Microsoft Sentinel

Cloud platforms (AWS/Azure/GCP)

OWASP ZAP

Snyk

Terraform

Job description

We are looking for a motivated Security Apps & Operations Engineer to join our security team. In this role you will be responsible for securing our applications and cloud infrastructure, operating and tuning our SIEM/SOC tooling, and embedding security practices into the software development lifecycle (DevSecOps). You will work cross-functionally with engineering, IT, and compliance teams to identify risks, respond to threats, and continuously improve our security posture. This is a rotational shift role with overlap with US hours.

Key Responsibilities

Application Security & DevSecOps

• Integrate security tooling (SAST, DAST, SCA) into CI/CD pipelines and enforce security gates.
• Conduct vulnerability assessments and coordinate remediation with development teams.
• Perform threat modeling and security code reviews for new features and major changes.
• Maintain and improve application security standards, policies, and secure coding guidelines.
• Track and report on vulnerability metrics, SLA adherence, and risk exposure.

Cloud Security (AWS / Azure / GCP)

• Monitor and enforce cloud security configurations using tools such as AWS Security Hub, Azure Defender, or GCP Security Command Center.
• Manage Identity and Access Management (IAM) policies, least-privilege principles, and privilege access controls across cloud environments.
• Perform cloud infrastructure security reviews and ensure compliance with CIS Benchmarks and organizational standards.
• Respond to cloud security incidents and misconfigurations, driving root-cause analysis and remediation.

SIEM & SOC Operations

• Operate, tune, and maintain SIEM platforms (e.g., Splunk, Microsoft Sentinel, or equivalent).
• Develop and maintain detection rules, correlation queries, and alerting logic to reduce noise and improve fidelity.
• Triage and investigate security alerts; elevate confirmed incidents following the IR playbook.
• Create dashboards and reports to surface key security metrics for stakeholders.
• Participate in on-call rotation for security incident response.

General Operations

• Support audit activities (SOC 2, ISO 27001, or similar) by providing evidence and remediating findings.
• Document runbooks, playbooks, and standard operating procedures.
• Stay current with the threat landscape, emerging CVEs, and security tooling developments.
• Contribute to day-to-day security operation (monitoring)

Requirements

Experience & Education

• 2 - 3 years of hands-on experience in an application security, security operations, or similar role.
• Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.

Technical Skills

• Proficiency with at least one major cloud platform (AWS, Azure, or GCP) and its native security services.
• Experience with SIEM platforms (Splunk, Sentinel, Elastic Security, or similar) - including writing queries/rules (SPL, KQL, etc.).
• Familiarity with DevSecOps tooling: SAST (e.g., Semgrep, SonarQube), DAST (e.g., OWASP ZAP, Burp Suite), SCA (e.g., Snyk, Dependabot).
• Understanding of OWASP Top 10, CVE scoring, and vulnerability management workflows.
• Scripting ability in Python, Bash, or PowerShell for automation and tooling.
• Working knowledge of networking concepts (TCP/IP, DNS, TLS, firewalls, proxies).

Soft Skills

• Clear written and verbal communication - able to explain technical risk to non-technical stakeholders.
• Detail-oriented with strong analytical and problem-solving skills.
• Collaborative team player who thrives in a fast-paced, cross-functional environment.

Preferred Qualifications

• Industry certifications such as CompTIA Security+, AWS Security Specialty, GCIA, GCSA, CEH, or equivalent.
• Experience with container security (Docker, Kubernetes) and infrastructure-as-code security scanning (Terraform, CloudFormation).
• Familiarity with compliance frameworks: SOC 2, ISO 27001, NIST CSF, or PCI-DSS.
• Prior exposure to incident response or digital forensics workflows.
• Experience with ticketing and ITSM platforms (Jira, ServiceNow).

What We Offer

• Competitive salary and performance-based bonus.
• Support for professional certifications and continuous learning.
• Collaborative, security-first culture where your work has real impact.

About Rediminds

At RediMinds, we build AI-enabled systems that help complex industries operate better, faster, and more intelligently. Our work spans healthcare, legal, finance, government, and other high-impact domains where software quality, trust, and speed truly matter.

We are a growing, entrepreneurial team that values ownership, clarity, compassion, and technical excellence. We're looking for builders who want to grow with us, contribute meaningfully, and be part of a team creating real products with real-world impact.

RediMinds - building the future with people who care enough to get the details right.

RediMinds, Inc. is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants and prohibit discrimination and harassment of any kind. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, age, national origin, disability, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.