Senior Security Engineer-2

42Gears Mobility Systems Pvt Ltd.; Bengaluru; On-site; INR 4,000,000 - 6,500,000; Full time

Job summary

42Gears Mobility Systems Pvt Ltd. seeks a Senior Security Engineer-2 to design and implement security architectures across AWS, GCP and Azure. You will conduct security assessments, develop threat models, and drive secure cloud practices while mentoring the team and advancing security awareness.

The role emphasizes cloud hardening, IAM governance, and proactive tooling in a multi-cloud environment. You will collaborate with cross-functional teams to integrate security controls into the software

Qualifications

• Security architecture experience across cloud platforms (AWS/Azure/GCP).
• Knowledge of security controls, threat modeling and regulatory mappings.
• Experience integrating security into SDLC and CI/CD pipelines.
• Strong communication and problem-solving skills.

Responsibilities

• Design and implement security architecture aligned with business needs.
• Conduct security assessments and remediation of gaps.
• Develop threat models and architecture diagrams for standardization.
• Collaborate with teams to embed security in the SDLC.
• Pilot emerging security tech to maintain proactive defense.
• Mentor juniors and lead security awareness initiatives.
• Architect secure cloud solutions with continuous compliance.
• Oversee IAM across multi-clouds with least-privilege governance.
• Automate security guardrails via IaC for consistent deployment.
• Design centralized logging/monitoring for threat detection.
• Integrate SAST/DAST/SCA into CI/CD pipelines.

Skills

NIST CSF

ISO 27001

SOC2

AWS

Azure

GCP

STRIDE

PASTA

Zero Trust

JIT access

Docker

Kubernetes

Vault

SAST

DAST

SCA

Micro-segmentation

WAF

API Security

PKI

OWASP Top 10

FedRAMP

HIPAA

PCI-DSS

CI/CD

Tools

Docker

Kubernetes

Vault

Job description

Role description

We are looking for a skilled candidate for the position of Senior Security Engineer-2 who is responsible for designing and implementing security solutions, conducting security assessments, and developing security architecture frameworks for 42Gears products and infrastructure. This role includes significant responsibility for designing and implementing secure cloud architectures across AWS, and GCP platforms. We are seeking a strategic and analytical professional with solid security architecture and infrastructure experience who possesses strong technical communication and problem-solving skills.

Role & responsibilities

• Design and implement security architecture solutions aligned with business requirements and industry best practices.
• Conduct security assessments and vulnerability analysis to identify and remediate gaps in existing infrastructure.
• Develop comprehensive documentation, including threat models and architecture diagrams, to standardize security across the organization.
• Collaborate with cross-functional teams to integrate security controls directly into the software development lifecycle (SDLC).
• Evaluate and pilot emerging security technologies to maintain a proactive defense posture against evolving threats.
• Mentor junior team members and lead security awareness initiatives to foster a culture of collective responsibility.
• Architect secure cloud solutions that ensure continuous compliance with organizational policies and cloud-native best practices.
• Perform cloud hardening by evaluating infrastructure configurations and implementing rigorous security benchmarks.
• Oversee IAM strategies across multi-cloud environments (AWS/GCP) to enforce strict least-privilege access and identity governance.
• Automate security guardrails through Infrastructure as Code (IaC) to ensure consistent security deployment across all environments.
• Design centralized logging and monitoring frameworks to provide the visibility required for effective threat detection and response.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines to automate the detection of vulnerabilities in custom code and third-party libraries.
• Develop security blueprints for containerized environments (Kubernetes/Docker) covering image signing, pod security, and runtime protection.
• Define Data Loss Prevention (DLP) architectures to monitor and control the movement of sensitive data across cloud and hybrid environments.
• Map technical security controls to regulatory frameworks (SOC2, ISO 27001, GDPR) to ensure the architecture meets audit requirements.

Critical Skills and Competencies

• Security Frameworks: Proficient in NIST CSF, ISO 27001, and SOC2 control mapping.
• Cloud Architecture: Security design knowledge for AWS (EC2, S3, VPC, Lambda, IAM), Azure (VMs, KMS,Storage, App Services), and GCP (Compute Engine, Cloud Storage, Identity Management) environments.
• Threat Modeling: Expert in STRIDE/PASTA methodologies and infrastructure risk assessment.
• Identity & Access: Advanced IAM governance, Zero Trust architecture, and JIT access.
• Container Security: Hardening and orchestration security for Docker and Kubernetes.
• DevSecOps: Integrating SAST/DAST/SCA gating into automated CI/CD pipelines.
• Network Security: Implementing micro-segmentation, WAF, and API Security Gateways.
• Data Protection: Centralized secrets management (Vault) and PKI/Encryption standards.
• Security Observability: Architecting SIEM/SOAR telemetry for high-fidelity detection.
• Application Security: Deep knowledge of OWASP Top 10 and secure coding practices.
• Compliance: Technical auditing against FedRAMP, HIPAA,PCI-DSS standards cloud security assessment methodologies.

In addition, preference will be given to candidates who possess any of the following certifications:

• CISSP (Certified Information Systems Security Professional) or similar advanced security certification
• CISM (Certified Information Security Manager) or GIAC Security Essentials (GSEC)
• Cloud architect certifications such as AWS Solutions Architect Professional, Azure Solutions Architect Expert, or Google Cloud Professional Cloud Architect.
• Kubernetes security certifications (CKA, CKAD) or cloud-native security certifications.
• Experience with enterprise security frameworks and governance standards (NIST, ISO27001, SOC 2)