Security Engineer - AWS Cloud Services

Location: Bawāna

Description

Role Overview :

Cloud & Hybrid Security Architecture

We are seeking an experienced Security Engineer to safeguard our hybrid infrastructure spanning AWS cloud environments and on-premises data centers. You will design and implement security controls, monitor threats, respond to incidents, and ensure compliance with regulatory standards including SEBI Responsibilities :

Design and implement security controls across AWS cloud services and on-premises data centers
Configure AWS security services including IAM, Guard Duty, Security Hub, Cloud Trail, WAF, and KMS
Define and maintain security baselines, hardening standards, and cloud security benchmarks CIS, NIST
Implement zero-trust security principles across hybrid environments

Threat Detection & Incident Response

Monitor cloud and on-premises environments for security threats using SIEM/SOAR tools
Develop detection rules, correlation logic, and threat hunting use cases
Investigate and respond to security incidents including breach analysis and remediation
Conduct forensic analysis and produce incident reports with RCA & Risk Management :
Conduct regular vulnerability assessments, penetration testing, and security audits
Implement vulnerability scanning and patch management processes
Perform risk assessments and maintain risk registers
Support VAPT remediation activities

Compliance & Governance

Ensure compliance with SEBI, ISO 27001, PCI DSS, SOC 2, and other regulatory frameworks
Prepare audit evidence and control validation artifacts
Maintain security documentation, policies, and operational runbooks

Infrastructure Security

Implement security hardening for Linux/Windows servers, databases, and network devices
Manage encryption, PKI/certificate lifecycle, and key management
Configure network security including firewalls, VPNs, and secure connectivity
Secure containerized environments Docker, ECS, Kubernetes)

Dev Sec Ops  Integration

Integrate security into CI/CD pipelines and infrastructure-as-code workflows
Automate security processes using Python, Bash, or Power Shell
Implement security scanning in Terraform/CDKTF deployments

Required Qualifications

Bachelor's degree in Computer Science, Information Security, or related field
3 - 6 years of hands-on experience in cloud and infrastructure security
Deep expertise in AWS security services and architecture
Strong understanding of network security protocols, encryption, and access controls

Experience with SIEM/SOAR platforms and threat detection tools
Knowledge of compliance frameworks : ISO 27001, NIST, SOC 2, PCI DSS, SEBI
Proficiency in scripting Python, Bash) for security automation

Experience with vulnerability scanning and penetration testing

Preferred Qualifications

AWS Certified Security Specialty or CCSP certification
CISSP, CEH, or equivalent security certifications
Experience in financial services/regulated industries
Familiarity with infrastructure-as-code security Terraform, Cloud Formation)
Understanding of Dev Sec Ops  practices and secure CI/CD

(t.tech)