Sr Security Engineer

Ankercloud GmbH; Bengaluru; On-site; INR 800,000 - 1,500,000; Full time

Job summary

A leading security solution provider in Bengaluru seeks an experienced Penetration Testing Expert. In this role, you will conduct IT security assessments, lead a security team, and address cloud security challenges. The ideal candidate has 4+ years of experience, deep knowledge in cloud security architectures (AWS & GCP), and a Bachelor’s degree in Computer Science. Join our innovative team to enhance the security of our clients’ cloud environments.

Qualifications

• 4+ years of experience as a Penetration Testing Expert.
• 3+ years of hands-on experience in cloud security architecture (AWS & GCP).
• Strong understanding of testing frameworks like PTES and OWASP.

Responsibilities

• Conduct penetration testing and vulnerability assessments on web applications and cloud platforms.
• Identify security design gaps in cloud architectures.
• Lead and oversee the security team for high-quality deliverables.

Skills

Penetration testing

Cloud security architecture

Vulnerability assessments

Incident response

Threat modeling

Social engineering

DevOps practices

Critical thinking

Education

Bachelor’s Degree in Computer Science

Tools

Burp Suite

Metasploit

Nessus

Wireshark

nmap

Job description

• Conduct penetration testing and vulnerability assessments on web applications, APIs, and cloud platforms (AWS, GCP, etc.) to identify vulnerabilities and potential attack vectors.
• Identify security design gaps in new and existing cloud architectures and collaborate with cross-functional teams to design effective mitigation strategies.
• Perform cloud security assessments, evaluating security controls and deployment models on various cloud platforms.
• Lead and oversee the security team to ensure high-quality deliverables for clients.
• Document findings, methodologies, and exploitation techniques in clear, actionable reports for both technical and non-technical stakeholders.
• Lead incident response efforts in the event of security breaches or incidents.
• Provide guidance, training, and mentorship to junior team members.
• Perform threat modeling for cloud-based scenarios and apply principles to enhance platform security.
• Plan and execute social engineering assessments to evaluate susceptibility to phishing, pretexting, and other manipulation techniques.
• Demonstrate a deep understanding of cloud security concepts and best practices, advising clients on securing their environments effectively.
• Define and develop build and release best practices, collaborating with teams to promote secure development and deployment.
• Work with teams to implement security controls, defenses, and countermeasures to prevent internal or external attacks on cloud environments.
• Stay current with developments in AppSec and CloudSec, researching emerging threats, attack vectors, and vulnerabilities in cloud and web technologies.

Technical Expertise

• Education: Bachelor’s Degree in Computer Science.
• Experience: 4+ years as a Penetration Testing Expert.
• 3+ years of hands-on experience in cloud security architecture (AWS & GCP), including native tools and best practices.
• Experience in planning and executing penetration tests/red team exercises for web applications, APIs, containers, and cloud platforms.
• Proficiency in creating exploits and PenTest scripts.
• Strong understanding of testing frameworks such as PTES and OWASP; expertise in OWASP Top 10 is essential.
• Familiarity with industry-standard security practices (OWASP, SANS) and compliance frameworks such as ISO 27001, SOC 2, HIPAA, etc.
• Proficiency in using tools like Burp Suite, Metasploit, Nessus, Wireshark, nmap, etc.
• Knowledge of security for containers, hands-on experience with DevSecOps principles, and end-to-end secure development processes.
• Relevant experience in DevOps and cloud migration.
• Strong critical thinking and problem-solving abilities.

Good to Have Certifications:

• Offensive Security Certified Professional (OSCP)
• eLearn Security Web Application Penetration Tester eXtreme (eWPTX)
• CREST Registered Penetration Tester (CRT)
• AWS Certified Security – Specialty
• Certified Cloud Security Professional (CCSP)

Get in touch.
The Ankercloud Team loves to listen