Senior Software Engineer - Security

LogiNext; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A leading technology firm in Mumbai is seeking a Senior Engineer - Security to take charge of security infrastructure design and DevSecOps implementation. The ideal candidate will have a Bachelor’s degree in a related field, 4 to 7 years of cybersecurity experience, and relevant certifications. Key responsibilities include overseeing security architecture, enhancing security posture, automation, and ensuring compliance with standards. This role offers a dynamic work environment with opportunities for professional growth.

Qualifications

• 4 to 7 years working in the Cyber Security field.
• At least one professional level technical certification required.
• Experience in SOC 2, ISO and VAPT required.
• Experience with Azure AD/Active Directory SSO and MFA.
• Strong writing and communication skills.

Responsibilities

• Design and lead the build-out of security infrastructure and tools.
• Take ownership of security architecture and design.
• Assist with hardening initiatives and compliance monitoring.
• Make recommendations for policies and best practices.
• Work with application teams to implement DevSecOps.

Skills

Network security

Identity and Access Management (IAM)

DevSecOps

Continuous monitoring

Zero-trust architecture

Troubleshooting

Automation (PowerShell, Python, Bash)

Education

Bachelor’s degree in Computer Science or related field

CISSP certification

CISM certification

CEH certification

Tools

BigFix

InTune

Imperva

Snort

Nessus/Nexpose

Job description

LogiNext is looking for a Senior Engineer - Security to join our team! As Senior Engineer - Security, you’ll lead the effort to design, implement, operate, support, and maintain the security infrastructure and supporting tools that are necessary to protect internal and external assets on networks that support our corporate infrastructure and applications. You’ll facilitate outstanding documentation of the architecture, configurations, processes, maintenance procedures, and service desk support functions.

The well qualified candidate will possess the ability to integrate at a high level the knowledge of several areas including network security, IAM, DevSecOps, continuous monitoring, enterprise desktop security, zero-trust architecture principles, security incident remediation, red/blue team exercises, securing multi-cloud and private cloud environments, and more. As we embrace separation of duties, this role will be a critical check and balance that reviews changes in the environment developed by other cybersecurity teams and thereby ensures changes are appropriate and don’t introduce additional risk/liability.

An excellent engineer to build the most efficient processes, workflows, and methodologies for implementing, monitoring, managing, and maintaining the most critical components of the entire organization. The engineer chosen for this position should adapt quickly and manage constant change effectively.

Responsibilities

• Design, implement, and lead the build-out of security infrastructure and tools
• Take functional ownership of all security related architecture and design following standards set forth by the enterprise cybersecurity teams
• Ensure the quality and accuracy of implementations, upgrades, configuration changes, and break/fix activities
• Assist the Enterprise Cybersecurity teams with hardening initiatives which include monitoring for baseline configuration compliance across all pertinent systems and tools
• Identify and make recommendations citing strong evidence for material changes in policies, standards, established architecture, and best practices where necessary to further enhance security posture
• Work closely with application development teams to ensure a successful implementation of DevSecOps complete with automated testing using tools and processes you will create

Requirements

• Bachelor’s degree in Computer Science, Engineering, Cyber Security, or a directly related field. Education requirements may be replaced with previous related work experience and cyber security certifications (CISSP, CISM, CEH, Azure Security Engineer, etc.)
• 4 to 7 years working in the Cyber Security field
• At least one professional level technical certification such as CCNP – Security, GIAC certifications, or another industry-recognized security-related certification
• Experience in SOC 2, ISO and VAPT required.
• Design and implementation experience with tools such as BigFix, InTune, Imperva, Snort, Nessus/Nexpose, and others that are similar
• Experience designing and implementing Enterprise wide -authentication and identity solutions
• Experience with Azure AD/Active Directory Single Sign-On (SSO), Multi-Factor Authentication (MFA), Application Registration, Identity Federation, Automation
• Experience with automation using PowerShell, Python, Bash, etc…
• Excellent troubleshooting and root cause diagnosis skills
• Strong writing and communication skills
• Experience creating and maintain accurate and detailed guidelines and procedures
• Experience with Agile Scrum Methodology and Azure DevOps