Security Engineer

Anchanto; India; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Anchanto is seeking an AWS & Application Security Engineer in Pune to lead security testing and hardening of AWS environments and applications. You will perform VAPT on web/mobile apps, review AWS accounts, and implement GuardDuty, CloudTrail, WAF, IAM, and other security services.

Strong Linux admin skills and experience with containers (Docker/Kubernetes) are essential. You will pen test cases, risk assessments, and audit reports, coordinate remediation with engineering, and drive secure SDLC

Qualifications

• 5+ years of security engineering experience in cloud environments.
• Hands-on experience with AWS security services and cloud configurations.
• Experience conducting security assessments, audits, and CIS benchmarks.

Responsibilities

• Conduct security assessments, VAPT, and penetration testing of web and mobile apps, AWS infrastructure, and networks.
• Review AWS accounts, VPCs, EC2, EKS, RDS, S3, Load Balancers, and serverless services.
• Implement and manage AWS security services like GuardDuty, Security Hub, Config, Inspector, CloudTrail, WAF, Shield, and IAM.

Skills

AWS Security

VAPT

Application Security

OWASP Top 10

Linux Admin

Cloud Security

Kubernetes

Docker

Incident Response

Tools

Burp Suite Pro

Nessus

Qualys

Acunetix

Netsparker

Metasploit

WebInspect

Nmap

AWS Security Hub

GuardDuty

Inspector

CloudTrail

Config

WAF

Shield

IAM

Job description

AWS & Application Security Engineer

Experience: 5+ Years
Location: Pune,India

Job Role Pointers:

• Conduct security assessments, VAPT, and penetration testing of web applications, mobile applications, AWS infrastructure, and networks.
• Perform security reviews of AWS accounts, VPCs, EC2 instances, EKS clusters, RDS databases, S3 buckets, Load Balancers, and serverless services.
• Implement and manage AWS security services such as GuardDuty, Security Hub, AWS Config, Inspector, CloudTrail, WAF, Shield, and IAM.
• Conduct regular cloud security posture assessments and identify misconfigurations against AWS security best practices and CIS benchmarks.
• Identify security vulnerabilities, misconfigurations, and compliance gaps, and drive remediation efforts.
• Hands-on experience with Ansible Automation for server provisioning, configuration management, security hardening, patch management, and compliance enforcement.
• Develop and maintain Ansible playbooks for automating security controls, vulnerability remediation, user access management, and AWS infrastructure deployments.
• Perform and support internal/external security audits and compliance assessments.
• Prepare security test cases, audit checklists, VAPT reports, and risk assessment reports.
• Coordinate with engineering and infrastructure teams to remediate findings within defined timelines.
• Implement OWASP security best practices and support secure SDLC initiatives.
• Perform Linux server hardening and infrastructure security reviews.
• Support firewall, network security, cloud security monitoring, and incident response activities.

Required Skills

• Strong hands-on experience in AWS Security, Application Security, and VAPT.
• Hands-on experience with AWS Security Hub, GuardDuty, Inspector, CloudTrail, Config, WAF, Shield, Secrets Manager, and KMS.
• Experience securing containerized environments such as Docker and Kubernetes
• Expertise with tools such as Burp Suite Pro, Nessus, Qualys, Acunetix, Netsparker, Metasploit, WebInspect, and Nmap.
• Experience with OWASP Top 10, secure coding practices, and cloud security controls.
• Good understanding of Linux administration, server hardening, and network security.
• Experience participating in at least two security audits, with one conducted in the last 12 months.
• Excellent analytical, documentation, and communication skills.

Preferred

• Experience in SaaS, e-commerce, or product-based organizations.
• Certifications such as AWS Security Specialty, CISM, or ISO 27001 Lead Auditor.