Senior Manager Cybersecurity

Key Responsibilities:

Application & Cloud Security

-Lead cloud security architecture and implementation across AWS and Kubernetes platforms

-Drive secure configurations, IAM policies, container security, and workload protection

-Embed secure coding practices and threat modelling into the SDLC (Shift-Left Security)

-Oversee the protection of web applications, APIs, and microservices from OWASP Top 10 threats

Threat Intelligence & Vulnerability Management

-Lead VAPT efforts across apps, APIs, infrastructure, and cloud

-Drive threat intelligence integration and external attack surface monitoring

-Coordinate with engineering teams to remediate vulnerabilities and misconfigurations

Incident Response & Monitoring

-Establish and maintain incident response procedures and playbooks

-Collaborate with SRE and SOC teams for cloud-native monitoring, alerting, and post-incident reviews

-Analyse security events and lead investigations to prevent recurrence

Security Engineering & Enablement

-Promote secure engineering practices through automation and DevSecOps principles

-Drive tooling adoption (e.g., WAF, XDR, SAST/DAST, CNAPP)

-Conduct security reviews for new projects and infrastructure changes

-Coach engineers on secure design principles and emerging threats

Desired Skills & Experience

-10+ years in cybersecurity with hands-on experience in appsec, cloud security, and DevSecOps

-Deep understanding of AWS security best practices, IAM, containerization, and Kubernetes security

-Strong expertise in VAPT, OWASP Top 10, secure SDLC, and threat modelling

-Familiarity with tools such as Burp Suite, GuardDuty, AWS WAF, Trivy, Checkov, and Jenkins

-Experience with SIEM, XDR, WAF, IDS/IPS, and container security solutions

-Strong leadership, stakeholder management, and team-building skills

-Certifications like CISSP, OSCP, CCSP, or relevant cloud security certifications are a plus

Nice to Have

-Experience in CI/CD security automation

-Exposure to Zero Trust implementations

-Experience with Infrastructure as Code security and policy-as-code tooling (OPA/Gatekeeper, Terraform security)