Sr Security Engineer

Ankercloud GmbH; Bengaluru; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

Ankercloud GmbH in Bengaluru, India is seeking a seasoned Penetration Testing Expert to conduct comprehensive testing across web apps, APIs, and cloud platforms. You will identify vulnerabilities, design mitigations, and lead a security team to deliver high-quality client outcomes.

The role requires 4+ years in pentesting and 3+ years in cloud security (AWS/GCP), with proficiency in OSCP-like practices and security reporting. You will mentor juniors and drive secure development initiatives.

Qualifications

• Bachelor's degree in Computer Science required.
• 4+ years as a Penetration Testing Expert.
• 3+ years in cloud security architecture (AWS & GCP).
• Experience planning penetrations/tests and red team exercises.
• Proficient in PTES and OWASP Top 10 frameworks.

Responsibilities

• Conduct penetration testing and vulnerability assessments on web applications, APIs, and cloud platforms (AWS, GCP, etc.) to identify vulnerabilities and potential attack vectors.
• Identify security design gaps in new and existing cloud architectures and collaborate with cross-functional teams to design mitigation strategies.
• Perform cloud security assessments evaluating controls and deployment models on various cloud platforms.
• Lead and oversee the security team to ensure high-quality deliverables for clients.
• Document findings, methodologies, and exploitation techniques in clear, actionable reports for technical and non-technical stakeholders.
• Lead incident response efforts in the event of security breaches or incidents.
• Provide guidance, training, and mentorship to junior team members.
• Plan and execute threat modeling for cloud-based scenarios to enhance platform security.
• Demonstrate understanding of cloud security concepts and best practices, advising clients on securing environments.

Skills

Penetration testing

Cloud security

Threat modeling

Incident response

Team leadership

Education

Bachelor's Degree in Computer Science

Tools

Burp Suite

Metasploit

Nessus

Wireshark

nmap

Job description

• Conduct penetration testing and vulnerability assessments on web applications, APIs, and cloud platforms (AWS, GCP, etc.) to identify vulnerabilities and potential attack vectors.
• Identify security design gaps in new and existing cloud architectures and collaborate with cross-functional teams to design effective mitigation strategies.
• Perform cloud security assessments, evaluating security controls and deployment models on various cloud platforms.
• Lead and oversee the security team to ensure high-quality deliverables for clients.
• Document findings, methodologies, and exploitation techniques in clear, actionable reports for both technical and non-technical stakeholders.
• Lead incident response efforts in the event of security breaches or incidents.
• Provide guidance, training, and mentorship to junior team members.
• Perform threat modeling for cloud-based scenarios and apply principles to enhance platform security.
• Plan and execute social engineering assessments to evaluate susceptibility to phishing, pretexting, and other manipulation techniques.
• Demonstrate a deep understanding of cloud security concepts and best practices, advising clients on securing their environments effectively.
• Define and develop build and release best practices, collaborating with teams to promote secure development and deployment.
• Work with teams to implement security controls, defenses, and countermeasures to prevent internal or external attacks on cloud environments.
• Stay current with developments in AppSec and CloudSec, researching emerging threats, attack vectors, and vulnerabilities in cloud and web technologies.

Technical Expertise

• Education: Bachelor's Degree in Computer Science.
• Experience: 4+ years as a Penetration Testing Expert.
• 3+ years of hands-on experience in cloud security architecture (AWS & GCP), including native tools and best practices.
• Experience in planning and executing penetration tests/red team exercises for web applications, APIs, containers, and cloud platforms.
• Proficiency in creating exploits and PenTest scripts.
• Strong understanding of testing frameworks such as PTES and OWASP; expertise in OWASP Top 10 is essential.
• Familiarity with industry-standard security practices (OWASP, SANS) and compliance frameworks such as ISO 27001, SOC 2, HIPAA, etc.
• Proficiency in using tools like Burp Suite, Metasploit, Nessus, Wireshark, nmap, etc.
• Knowledge of security for containers, hands-on experience with DevSecOps principles, and end-to-end secure development processes.
• Relevant experience in DevOps and cloud migration.
• Strong critical thinking and problem-solving abilities.

Good to Have Certifications:

• Offensive Security Certified Professional (OSCP)
• eLearn Security Web Application Penetration Tester eXtreme (eWPTX)
• CREST Registered Penetration Tester (CRT)
• AWS Certified Security – Specialty
• Certified Cloud Security Professional (CCSP)