Security Engineer

Goodfit; India; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Goodfit is seeking an experienced security professional to conduct vulnerability assessments and penetration tests on web applications, REST APIs, and cloud environments.

You will deploy and configure SIEM platforms, integrate log sources (AWS, Microsoft 365, AD, firewalls), write detection rules, and triage alerts within SLAs.

The role requires hands-on experience with OWASP Top 10, AWS security services, and producing detailed VAPT reports with remediation guidance.

Qualifications

• 2–4 years hands-on experience in application security, penetration testing, or SOC operations.
• Experience conducting VAPT on web applications, REST APIs, and cloud environments.
• Hands-on SIEM experience — deployment, configuration, detection rule writing, and log source integration.
• Knowledge of AWS security services — IAM, GuardDuty, CloudTrail, Security Hub, WAF.

Responsibilities

• Conduct vulnerability assessments and penetration tests on web applications, REST APIs, and cloud environments.
• Test AWS environments including serverless infrastructure, IAM, and cloud configuration against CIS and Well-Architected benchmarks.
• Write detailed VAPT reports with CVSS ratings, proof-of-concept evidence, and remediation recommendations.
• Deploy, configure, and optimise SIEM platforms for client environments.
• Integrate log sources into SIEM — AWS, Microsoft 365, Active Directory, firewalls, endpoints, and applications.
• Write and tune custom detection rules to reduce noise and improve alert quality.
• Triage security alerts, investigate incidents, and respond within defined SLAs.
• Map detections to compliance frameworks — HIPAA, SOC 2, NIST, ISO 27001, PCI DSS.
• Produce SOC reports, incident RCAs, and remediation tracking documentation.

Skills

Application security

Penetration testing

SOC operations

Report writing

Tools

SIEM deployment

AWS IAM

GuardDuty

CloudTrail

Job description

Conduct vulnerability assessments and penetration tests on web applications, REST APIs, and cloud environments.

Test AWS environments including serverless infrastructure, IAM, and cloud configuration against CIS and Well-Architected benchmarks.

Write detailed VAPT reports with CVSS ratings, proof-of-concept evidence, and remediation recommendations.

Deploy, configure, and optimise SIEM platforms for client environments.

Integrate log sources into SIEM — AWS, Microsoft 365, Active Directory, firewalls, endpoints, and applications.

Write and tune custom detection rules to reduce noise and improve alert quality.

Triage security alerts, investigate incidents, and respond within defined SLAs.

Map detections to compliance frameworks — HIPAA, SOC 2, NIST, ISO 27001, PCI DSS.

Produce SOC reports, incident RCAs, and remediation tracking documentation.

Must Have

• 2–4 years of hands‑on experience in application security, penetration testing, or SOC operations.
• Experience conducting VAPT on web applications, REST APIs, and cloud environments.
• Hands‑on SIEM experience — deployment, configuration, detection rule writing, and log source integration.
• Knowledge of AWS security services — IAM, GuardDuty, CloudTrail, Security Hub, WAF.
• Familiarity with OWASP Top 10 and OWASP API Security Top 10.
• Strong report writing skills.

Good to Have

• Security certifications — CCNA, AWS SA, CEH, CompTIA Security+.
• Experience with Microsoft 365 security — Entra ID, Defender XDR.
• Scripting in Python or Bash.
• Cloud security certifications — AWS Security Specialty.