Security Engineer, Infrastructure Security

Large incident response engagements can involve 20 or more responders working in shifts for weeks. We operate security operations centres on three continents, so alerts are triaged by analysts on day shift wherever they arrive. Founded in 2015, we now have 290 employees.

Position summary

Looking for a Security Engineer, Infrastructure Security who wants to stay somewhere for a while. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Fully remote. You can work from anywhere in India. Normal working hours, Monday to Friday. You need a reliable internet connection and somewhere quiet to work.

Duties

• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Triage bug bounty reports from HackerOne or Bugcrowd
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Automate security checks in CI/CD pipelines
• Own secrets management, key rotation and KMS policies
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Assess third-party vendors and SaaS integrations for security risk

Minimum qualifications

• Hands-on cloud security experience in AWS, Azure or GCP
• Programming or scripting ability in Python, Go or similar
• Experience with SIEM, EDR or vulnerability management tools
• Good judgment on risk: knowing what to fix now and what can wait
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Preferred

• IaC scanning with Checkov or tfsec
• Malware analysis or digital forensics background
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Kubernetes and container security (Falco, OPA Gatekeeper)

What we offer

• Health insurance for you and your family
• Provident fund
• Paid leave
• Flexible hours
• Group term life insurance
• Internet reimbursement

Candidates must be eligible to work in India.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Tiwari Cyber.