Senior Security Engineer- 2

42 Gears Mobility Systems; Bengaluru; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

42 Gears Mobility Systems in Bengaluru is seeking a Senior Security Engineer to design and implement security solutions for our products. This role involves developing security architecture, conducting assessments, and integrating security into cloud environments across AWS and GCP.

The ideal candidate should have 4-6 years of experience in security engineering, strong problem-solving skills, and the ability to work collaboratively with cross-functional teams. Preferred certifications include CISSP and AWS Solutions Architect.

Qualifications

• 4-6 years of relevant experience in security engineering.
• Strong technical communication and problem-solving skills.
• Experience with cloud security frameworks like NIST and ISO.

Responsibilities

• Design and implement security architecture solutions aligned with business requirements.
• Conduct security assessments and vulnerability analysis.
• Develop comprehensive documentation, including threat models and architecture diagrams.
• Collaborate with cross-functional teams to integrate security controls.
• Evaluate emerging security technologies for proactive defense.
• Mentor junior team members and lead security awareness initiatives.
• Architect secure cloud solutions ensuring compliance with policies.
• Perform cloud hardening and security benchmark implementations.
• Oversee identity and access management strategies across cloud environments.
• Automate security guardrails with Infrastructure as Code.
• Design centralized logging frameworks for threat detection.
• Integrate SAST, DAST into CI/CD pipelines.
• Develop security blueprints for container environments.
• Define Data Loss Prevention architectures.
• Map technical controls to compliance frameworks.
• Plan for advanced security architectures.
• Implement zero-trust architecture and security measures.
• Conduct technical auditing against security standards.

Skills

Design and implement security architecture

Conduct security assessments

Develop documentation and threat models

Architect secure cloud solutions

Evaluate security technologies

Mentor junior team members

Integrate security controls

Automate security guardrails

Implement identity management

Centralized logging and monitoring

Integrate security tools into CI/CD

Develop security blueprints for containers

Data Loss Prevention architectures

Technical security controls mapping

IAM governance and Zero Trust architecture

Hardening Docker and Kubernetes

Centralized secrets management

Technical auditing against standards

Education

CISSP or similar advanced security certification

CISM or GIAC Security Essentials

AWS/Azure/Google Cloud certifications

Kubernetes security certifications

Job description

A clearer role summary, responsibilities, and application entry point are laid out below so this page feels like a destination, not a placeholder.

Full Time

Location

Relevant Experience: 4-6 years

We are looking for a skilled candidate for the position of senior Security Engineer who is responsible for designing and implementing security solutions, conducting security assessments, and developing security architecture frameworks for 42Gears products and infrastructure. This role includes significant responsibility for designing and implementing secure cloud architectures across AWS, and GCP platforms. We are seeking a strategic and analytical professional with solid security architecture and infrastructure experience who possesses strong technical communication and problem-solving skills. The role requires the ability to work collaboratively with cross-functional teams in a dynamic environment.

Responsibilities

• Design and implement security architecture solutions aligned with business requirements and industry best practices.
• Conduct security assessments and vulnerability analysis to identify and remediate gaps in existing infrastructure.
• Develop comprehensive documentation, including threat models and architecture diagrams, to standardize security across the organization.
• Collaborate with cross-functional teams to integrate security controls directly into the
• Evaluate and pilot emerging security technologies to maintain a proactive defense posture against evolving threats.
• Mentor junior team members and lead security awareness initiatives to foster a culture of collective responsibility.
• Architect secure cloud solutions that ensure continuous compliance with organizational policies and cloud-native best practices.
• Perform cloud hardening by evaluating infrastructure configurations and implementing rigorous security benchmarks.
• Oversee IAM strategies across multi-cloud environments (AWS/GCP) to enforce strict least-privilege access and identity governance.
• Automate security guardrails through Infrastructure as Code (IaC) to ensure consistent security deployment across all environments.
• Design centralized logging and monitoring frameworks to provide the visibility required for effective threat detection and response.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines to automate the detection of vulnerabilities in custom code and third-party libraries.
• Develop security blueprints for containerized environments (Kubernetes/Docker) covering image signing, pod security, and runtime protection.
• Define Data Loss Prevention (DLP) architectures to monitor and control the movement of sensitive data across cloud and hybrid environments.
• Map technical security controls to regulatory frameworks (SOC2, ISO 27001, GDPR) to ensure the architecture meets audit requirements.
• Proficient in NIST CSF, ISO 27001, and SOC2 control mapping.
• Security design knowledge for AWS (EC2, S3, VPC, Lambda, IAM), Azure (VMs, KMS, Storage, App Services), and GCP (Compute Engine, Cloud Storage, Identity Management) environments.
• Expert in STRIDE/PASTA methodologies and infrastructure risk assessment.
• Advanced IAM governance, Zero Trust architecture, and JIT access.
• Hardening and orchestration security for Docker and Kubernetes.
• Integrating SAST/DAST/SCA gating into automated CI/CD pipelines.
• Implementing micro-segmentation, WAF, and API Security Gateways.
• Centralized secrets management (Vault) and PKI/Encryption standards.
• Architecting SIEM/SOAR telemetry for high-fidelity detection.
• Deep knowledge of OWASP Top 10 and secure coding practices.
• Technical auditing against FedRAMP, HIPAA, PCI-DSS standards cloud security assessment methodologies.

Preferred Certifications

• CISSP (Certified Information Systems Security Professional) or similar advanced security certification
• CISM (Certified Information Security Manager) or GIAC Security Essentials (GSEC)
• Cloud architect certifications such as AWS Solutions Architect Professional, Azure Solutions Architect Expert, or Google Cloud Professional Cloud Architect.
• Kubernetes security certifications (CKA, CKAD) or cloud-native security certifications.
• Experience with enterprise security frameworks and governance standards (NIST, ISO)