Lead Security Engineer

As the Lead Security Engineer, you will need to have a Bachelor's degree or equivalent and possess at least 10-12 years of experience in the field. Your expertise should include a deep understanding of AWS Cloud security, NIST, ISO27001, and PCI DSS Compliance. You should have hands-on experience with PCI-compliant environments and managing vulnerability cycles for OS and Non-OS Patch. Your proficiency should extend to TSL/SSL and Cryptographic Standards, with the ability to identify and mitigate risks from deprecated algorithms or vulnerabilities. In addition, you should have a solid grasp of DevSecOps practices and integrating security measures into the software development lifecycle, including secure coding and automated deployment using CI/CD pipelines, preferably with Jenkins. Experience with GitFlow and familiarity with monitoring tools like CloudWatch, Dynatrace, Splunk, as well as vulnerability scanning tools such as SonarQube and Qualys, will be essential for this role. A basic knowledge of Java applications and network basics, particularly from a PCI segmentation perspective and an understanding of firewall rules, are also required. Furthermore, having some exposure to WAF Management and configuration, particularly with Akamai solutions, will be considered advantageous for this position. Your role will involve ensuring the security of systems and applications, implementing best practices, and proactively identifying and addressing security risks to safeguard the organization's assets and data.,