Engineer / Sr. Engineer - Cyber / Cloud Secrurity

Key Responsibilities:

• Perform in-depth penetration testing, vulnerability assessments, and security reviews of applications, infrastructure, and networks.
• Identify, exploit, and document security vulnerabilities across systems and provide remediation recommendations.
• Simulate sophisticated attacks to test the strength of security controls and identify potential areas of compromise.
• Collaborate with development, infra, and DevOps teams to integrate security into the development lifecycle and Infrastructure-as-Code (IaC) security.
• Develop comprehensive security test plans, methodologies, and tools to ensure effective assessment of systems.
• Create detailed reports that outline vulnerabilities, risks, and recommended mitigations.
• Perform threat modeling and risk assessments to prioritize testing efforts.
• Monitor network traffic for threats and respond to security incidents.
• Ensure security best practices in Cloud environments, security controls for cloud workloads, IAM policies, and network security.
• Monitor and respond to cloud security incidents using SIEM and cloud-native security tools.
• Integrate and automate security testing and compliance checks into CI/CD pipelines using tools like

  SAST, DAST, and IAST

  .

Required Skills & Qualifications:

• Bachelor's degree in

  Computer Science, Cybersecurity, or related field

  .
• 2-3 years of experience in cybersecurity with a focus on

  Penetration testing or Ethical Hacking

  ,

  Application Security, Cloud Security, and Dev Sec Ops

  .
• Experience with security tools such as

  Burp Suite, Metasploit, Nessus, Wireshark,Sonar Qube, AWS WAF, Google WAF, Kali Linux, and other vulnerability scanning tools, etc.

• Knowledge of

  SIEM

  ,

  EDR

  ,

  NIST, CIS, and OWASP

  security frameworks.
• Proficiency in scripting (Python, Bash, PowerShell) for security automation.
• Industry certifications like

  CEH, Security+, AWS/GCP Security, or any Dev Sec Ops-related certification

  (preferred but not mandatory).
• Excellent written and verbal communication skills to effectively report vulnerabilities and collaborate with stakeholders.