Principal Security Engineer-First Advantage (Mumbai/Bangalore)

Key Responsibilities

• Security Engineering Leadership: Design, build, and maintain scalable security solutions across cloud environments (AWS and Azure).
• Architecture Collaboration: Partner with software and infrastructure architects to review designs and ensure security is embedded throughout the development lifecycle.
• Automation Development: Own the development of tools and pipelines to automate go-live security reviews and integrate security into CI/CD workflows.
• Cloud Security Implementation: Engineer and deploy security controls such as IAM policies, encryption, logging, and monitoring in cloud-native environments.
• Mentorship & Influence: Mentor junior engineers and influence security best practices across engineering teams.
• Incident Response Support: Collaborate with incident response teams to investigate and remediate cloud-related security incidents.
• Continuous Improvement: Identify gaps in current security posture and drive initiatives to improve security maturity and automation.

Required Qualifications

• 8+ years of experience in security engineering, with significant experience in cloud environments.
• Strong software development skills (e.g., Python, Go, Java, or similar).
• Deep hands-on experience with AWS and Azure security services and infrastructure.
• Proven ability to develop and maintain automated security tooling and pipelines.
• Experience conducting security reviews of software and infrastructure architectures.
• Familiarity with infrastructure-as-code (e.g., Terraform, CloudFormation, Bicep).
• Strong understanding of DevSecOps practices and CI/CD integration.
• Excellent problem-solving skills and ability to work independently and collaboratively.

Preferred Qualifications

• Security certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, or OSCP.
• Experience with Kubernetes, container security, and serverless architectures.
• Knowledge of compliance frameworks (e.g., SOC 2, ISO 27001, HIPAA).
• Familiarity with security frameworks like NIST, MITRE ATT&CK, and CSA CCM

Perks and Benefits