Security Engineer

Anchanto; Pune District; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

A leading tech firm in Pune is seeking a Security Engineer with extensive AWS security experience. The successful candidate will manage security requirements for e-commerce products and conduct security audits. An ideal candidate has 5+ years of experience in security, vulnerability assessments, and penetration testing. Essential qualifications include certifications like CCNA/CompTIA+, and AWS Security specialty. This role offers an opportunity to work in a dynamic team and contribute to enhancing organizational security standards.

Qualifications

• 5+ years of experience in AWS app and infra security.
• Participated in at least 2 IT Security Audits in the last 12 months.
• Hands-on experience with security tools like Qualys and Nessus.

Responsibilities

• Manage security and compliance requirements for e-commerce products.
• Conduct security audits and identify gaps in various security domains.
• Prepare VAPT reports and assist management in finalizing audits.

Skills

AWS security

Vulnerability Assessment

Penetration Testing

Communication skills

Linux administration

Security auditing

Education

CCNA/CompTIA+ or similar

AWS Security specialty

Tools

Qualys

Nessus

Burp Suite Pro

Metaexploit

Job description

Responsibilities & Experience Requirements

• 5+ years’ of experience in AWS app and infra security, Vulnerability Assessment and Penetration testing.
• Should have participated in at least 2 IT Security Audits, preferably one of which should be in the last 12 months.
• Experience in working heterogeneous work environments and AWS cloud - product based company experience is good to have.
• The security engineer will be part of the cloud infra & security team that shall manage all security and compliance requirements for e-commerce products.
• Conduct and participate in security audits, identify gaps in web security, application security, mobile app security, Network security and IT infrastructure security, mitigate risks using right controls.
• The team members shall prepare VAPT (Vulnerability Assessment & Penetration Testing) reports using defined templates and assist the management for finalization of audit reports. Co‑ordinate to get the findings resolved in a specific time.
• The team members shall prepare the security checklists, test cases, and test scenarios to perform the security audit.
• Experience in analysing and in identifying the vulnerabilities in apps, AWS resources and configurations.
• Hands‑on experience in web application, Mobile App and network Vulnerability Assessment & Penetration Testing using industry standard tools such as Vulnerability Scanners for e.g. Qualys, Nessus, WebInspect, Acunetix, Metaexploit, Burp Suite Pro, Netsparker etc.
• Hands‑on Linux admin and security experience - hardening of servers as per industry standards.
• Experience working with OWASP (Open Web Application Security Project) security requirements and implementing them.
• Should have the ability to stay organized, and possess excellent communication skills.
• Perform or co‑ordinate penetration tests on computer systems, networks and applications.
• Perform physical security assessments of systems, servers and other network devices to identify areas including firewall maintenance and administration etc.
• Research, evaluate, document and discuss findings with Eng teams and management.
• Review and provide feedback for information security issues and fixes.
• Establish improvements for existing security services, including hardware, software, policies and procedures.
• Identify areas where improvement is needed in security education and awareness for users.
• Be sensitive to corporate considerations when performing testing (i.e. minimize downtime and loss of employee productivity).
• Stay updated on the latest malware and security threats.
• AWS Security experience is mandatory.
• Experience working with XDR/EDR and Microsoft O365 security and SaaS security.

Necessary certifications - CCNA/CompTIA+ or similar. AWS Security speciality or similar.