Senior Security Engineer

tecHindustan Solutions Private Limited; Mohali; On-site; INR 1,100,000 - 1,700,000; Full time

Job summary

tecHindustan Solutions Private Limited is seeking a Senior Security Engineer to own security across applications, cloud infrastructure, Kubernetes, CI/CD pipelines, and edge security. The role is highly hands-on with collaboration across Platform, Backend, DevOps, and Engineering teams.

Ideal candidates have 4+ years in Security Engineering with strong cloud-native production security experience, including Kubernetes, and a broad range of security controls across the stack.

Qualifications

• 4+ years of Security Engineering experience, with 3+ years securing cloud-native production environments.
• Hands-on Kubernetes security including RBAC, network policies, admission controls, and runtime security.
• Strong knowledge of AWS/Azure security, IAM, logging, key management, and guardrails.

Responsibilities

• Conduct threat modelling for authentication, sessions, payments, wallets, and bonuses.
• Strengthen Kubernetes security including RBAC, namespaces, policies, admission controls, and runtime hardening.
• Review application security in Node.js/TypeScript services with OWASP practices.
• Secure CI/CD pipelines with SAST, SCA, secret scanning, image scanning, signing, and least-privilege creds.
• Manage secrets and keys with secure injection, rotation, and KMS.
• Improve edge security using Cloudflare WAF, rate limiting, bot management, TLS.

Skills

Kubernetes security

Cloud security

Node.js security

AWS security

Terraform/Pulumi

Threat modelling

SIEM & IR

RBAC & policies

Edge security

Python scripting

Tools

Cloudflare

Kubernetes tools

CI/CD security tooling

Threat detection tools

Job description

TecHindustan is looking for a Senior Security Engineer to take ownership of security across our applications, cloud infrastructure, Kubernetes platform, CI/CD pipelines, and edge layer.

This role is highly hands-on and requires close collaboration with Platform, Backend, DevOps, and Engineering teams. The ideal candidate will have strong experience securing cloud-native production environments and be comfortable working across application, infrastructure, and cloud security.

Work Mode: Onsite

Experience: 4+ Years

Key Responsibilities

• Conduct threat modelling for critical business flows including authentication, sessions, payments, wallets, and bonuses
• Implement and strengthen Kubernetes security including RBAC, namespace isolation, network policies, admission controls, pod security, and runtime hardening
• Perform application security reviews across Node.js and TypeScript services, with a strong understanding of authentication, authorization, input validation, and OWASP practices
• Secure CI/CD pipelines through SAST, SCA, secret scanning, container image scanning, image signing, pinned digests, and least-privilege credentials
• Manage application and infrastructure secrets and keys, including secure injection, rotation, revocation, and KMS
• Strengthen edge security using Cloudflare WAF, rate limiting, bot management, DDoS protection, TLS, and origin protection
• Build and improve security telemetry, detection rules, SIEM integrations, alerting, and incident response runbooks
• Own vulnerability management, including risk-based prioritisation, remediation tracking, SLA management, and external penetration testing coordination
• Support security audits and regulatory requirements related to access controls, audit trails, data residency, retention, and change management
• Participate in production security incidents, lead root-cause analysis, and drive preventive and corrective actions

Required Skills & Experience

• 4+ years of experience in Security Engineering, with at least 3 years securing cloud-native production environments
• Strong hands-on experience with Kubernetes security, including RBAC, network policies, admission controllers, and runtime security
• Strong application security knowledge with Node.js and TypeScript-based services
• Solid understanding of AWS and/or Azure security, including IAM, segmentation, logging, key management, and security guardrails
• Experience with Terraform or Pulumi and infrastructure/supply-chain security
• Hands-on experience with Cloudflare, CDN, WAF, rate limiting, bot management, TLS, and origin security
• Experience with threat modelling and risk-based vulnerability assessment
• Experience with SIEM, detection engineering, security monitoring, and alert tuning
• Strong understanding of production incident response and post-incident analysis
• Proficiency in at least one scripting/programming language such as Python, Bash, Go, or TypeScript

The ideal candidate will be someone who can go beyond identifying security issues and take ownership of implementing effective controls. You should be comfortable reviewing code, understanding architecture, testing security boundaries, investigating incidents, and working directly with engineering teams to improve the overall security posture.