Senior Cloud & Application Security Engineer

Grid Dynamics; Chennai; In loco; INR 2.600.000 - 4.200.000; Tempo pieno

Descrizione del lavoro

Grid Dynamics is seeking a Senior Cloud & Application Security Engineer to join our Cybersecurity team in protecting cloud infrastructure, networks, and software applications. You will lead end-to-end app security testing, threat detection, and cloud governance across AWS and multi-cloud environments.

You will implement and optimize Veracode and Qualys TotalAppSec, conduct vulnerability analyses, and collaborate with engineering teams to remediate risks.

Competenze

• Hands-on experience with application security testing and SCA.
• Experience securing AWS and multi-cloud architectures.
• Proficient in security automation and scripting in Python.

Mansioni

• Implement, manage, and optimize Veracode platform capabilities, including SAST, DAST, and SCA.
• Conduct authenticated security scans using Qualys TotalAppSec, analyze detailed vulnerability reports, prioritize risks, and guide remediation with engineering teams.
• Perform vulnerability analysis and penetration testing using Burp Suite, ZAP, Nessus, OpenVAS, and Nmap.
• Manage Edge and Layer 7 security using AWS WAF and Cloudflare WAF, and define rate-limiting rules and bot policies.

Conoscenze

Python security scripting

Threat modelling

Cloud security architecture

Security incident response

Strumenti

Veracode

Qualys TotalAppSec

Burp Suite

OWASP ZAP

Nessus

OpenVAS

Wireshark

tcpdump

AWS WAF

Cloudflare WAF

GuardDuty

Macie

Config

IAM

S3

KMS

Secrets Manager

ACM

Descrizione del lavoro

Position Overview

We are seeking an experienced Senior Cloud & Application Security Engineer to join our Cybersecurity team. In this role, you will play a critical part in protecting our cloud infrastructure, network architectures, and software applications. You will be responsible for end-to-end application security testing, threat detection, network-level troubleshooting, and cloud security governance across AWS and multi-cloud environments.

Required Qualifications & Technical Skills

• Application Security: Hands-on experience with Veracode (SAST/DAST/SCA), Qualys TotalAppSec, Burp Suite, ZAP, Nessus, OpenVAS, and Nmap.
• AWS Security Infrastructure: Deep understanding of AWS networking/security services (VPC, Site-to-Site VPN, GuardDuty, Macie, Config, SecurityHub, Inspector, IAM, S3, KMS, Secrets Manager, Certificate Manager).
• Network & Packet Troubleshooting: Expertise in network components (NAT, Bastion, Security Groups, ACLs, CloudTrail) and deep packet analysis via Wireshark / tcpdump.
• WAF & Edge Security: Expertise with AWS WAF, Cloudflare WAF, Bot Management, and Rate Limiting.
• SecOps & Endpoint Security: Operational knowledge of SIEM, EDR, and Malware Protection configuration and threat monitoring.
• Automation: Proficiency in Python for security scripting, API integrations, and reporting.

Preferred Certifications

• AWS Certified Security Specialty (Highly Preferred)
• CompTIA Security+
• Certified Ethical Hacker (CEH)
• Equivalent certifications such as CISSP, OSCP, or GIAC (GSEC/GCIH) are a plus.

Candidate responsibilities

Key Responsibilities

Application & Software Security (AppSec)

• Implement, manage, and optimize Veracode platform capabilities, including SAST, DAST, and Software Composition Analysis (SCA).
• Conduct authenticated security scans using Qualys TotalAppSec, analyze detailed vulnerability reports, prioritize risks, and collaborate directly with engineering teams to guide remediation.
• Perform manual and automated application vulnerability analysis and penetration testing using tools such as Burp Suite, OWASP ZAP, Nessus, OpenVAS, and Nmap.
• Manage Edge and Layer 7 security using AWS WAF and Cloudflare WAF, defining and maintaining rate-limiting rules, bot management policies, and custom firewall configurations.

Cloud & Network Security Architecture

• Design, configure, and manage secure AWS network architectures involving VPCs, Security Groups, Network ACLs, NAT Gateways, Bastion Hosts, and Site-to-Site VPNs.
• Administer AWS security governance, monitoring, and compliance tooling, including Security Hub, GuardDuty, Macie, Config, Inspector, and CloudTrail.
• Implement and audit identity and data protection standards using AWS IAM, S3, KMS, Secrets Manager, and AWS Certificate Manager (ACM).
• Configure network-level logging, analyze network traffic, and troubleshoot complex routing or security issues.
• Perform dynamic packet analysis using Wireshark, tcpdump, and packet inspection tools to diagnose complex network/security anomalies.

Security Operations & Automation

• Maintain operational visibility into Malware Protection, SIEM, and Endpoint Detection and Response (EDR) platforms (configuration, monitoring, and incident investigation).
• Develop continuous automation scripts in Python to streamline repetitive security operations, automate report generation, and integrate security workflows.