Security Engineer

 About The Role  

Project Role :Security Engineer

Project Role Description :Apply security skills to design, build and protect enterprise systems, applications, data, assets, and people. Provide services to safeguard information, infrastructures, applications, and business processes against cyber threats.
Must have skills :Security Delivery Governance

Good to have skills :Identity Access Management (IAM)
Minimum 3 year(s) of experience is required

Educational Qualification :15 years full time education
Summary:We are seeking a detail-oriented SDLC (Software Development Life Cycle) Engineer to support and optimize software development processes across the organization. The ideal candidate will have a deep understanding of development methodologies, tools, and best practices, ensuring projects are delivered on time, within scope, and aligned with quality standards. The SDLC Engineer will collaborate with cross-functional teams to define requirements, implement process improvements, and maintain documentation that enhances efficiency, scalability, and governance throughout the software lifecycle.Roles & Responsibilities:1. Proactively use security engineering tools to identify and mitigate network & security risks.2.Develop and implement security measures using specialized tools based on Cyber security best practices.3. Support and build network segmentation capabilities, including deciding on the granularities of segmentation from a threat-led perspective (e.g., application level, environment level, network level, network policies, mapping attack paths, and building mitigations).4. Hands-on exposure and knowledge of Cyber & network security, e.g. management of firewalls, IDS, Web Gateways etc.5 Familiarity with deploying Infrastructure as Code and using CI/CD technologies, such as Azure DevOps.6 Hands-on experience working with cloud networking with a focus on security. For example, working with virtual networks, network security groups, virtual firewalling, Web Application Firewalls, and cloud networking security monitoring.7 Previous experience working with security best practices e.g. Zero trust, defence in depth, least privilege, security hardening.8 Experience in applying zero-trust principles to secure large-scale IT infrastructures, demonstrated by successful deployments within a corporate setting.Web Gateway, Web Security Detect & Respond end points, Siem, Sentinel & DefenderIts a bonus if you have but not essential9 Experience as a Cyber Security Engineer, Cyber Security Analyst, or a Network Engineer with an interest in becoming a Cyber Security Engineer.10 Experience with Terraform, Python, JavaScript/Node.js, PowerShell or Bash11 Knowledge of infrastructure and application monitoring, such as Icinga or Elastic Stack.12 Network Security certifications (especially Cloud centric) would be advantageous.13 Proven ability to design and deploy zero-trust security solutions, including identity and access management, micro segmentation, and continuous authentication, in complex organizational structures would be an advantage."Professional & Technical
Skills:

"Professional SkillsStrong problem-solving and analytical thinking with Excellent communication and collaboration abilitiesRisk assessment and management expertiseIncident response and crisis managementSecurity policy development and enforcementThreat modeling and mitigation planningKnowledge of regulatory frameworks (e.g., GDPR, HIPAA, PCI-DSS)Ability to conduct audits and compliance assessmentsTraining and awareness program developmentEthical hacking and penetration testing mindsetAttention to detail and commitment to continuous learningProject management and cross-functional teamworkDocumentation and reporting skillsAdaptability to fast-changing security threats and technologiesProfessional & Technical SkillsNetwork security architecture and designFirewall, VPN, and IDS/IPS configurationEndpoint protection and anti-malware solutionsCloud security (AWS, Azure, Google Cloud Platform)Encryption protocols (TLS, SSL, IPsec)Identity and access management (IAM)Security Information and Event Management (SIEM) tools (e.g., Splunk, QRadar)Vulnerability scanning and assessment tools (Nessus, OpenVAS)Penetration testing tools (Metasploit, Burp Suite, Kali Linux)Secure coding practices and code reviewOperating system hardening (Linux, Windows, macOS)Scripting and automation (Python, Bash, PowerShell)Threat intelligence platformsApplication security testing (SAST, DAST)Patch management and configuration control"
Additional Information:10 or more years experience working in Cyber SecurityThis position is based at our Bengaluru officeA 15-year full time education is required" Qualification 15 years full time education