Security Engineer Network or Web

Key Skills:

Roles and Responsibilities:

• Define, design, and implement a comprehensive cloud security framework and architecture aligned with business requirements and compliance standards.
• Develop and document cloud security controls and ensure their effective implementation and transition to managed operations.
• Manage AWS security, including IAM policies, roles, identity management, and applying best practices to secure AWS workloads.
• Conduct vulnerability assessments and penetration testing (VAPT) across applications, infrastructure, and APIs to identify gaps and recommend remediation.
• Lead API security practices ensuring secure design, development, deployment, and monitoring of APIs.
• Implement application security measures such as secure coding guidelines, static/dynamic code analysis, threat modeling, and DevSecOps integration.
• Utilize and optimize security tools for monitoring, detection, prevention, and response across the enterprise environment.
• Collaborate with developers, IT, and operations teams to promote secure development and operational practices.
• Perform security audits and risk assessments to ensure compliance with internal policies and external regulations.
• Stay updated with the latest security threats, vulnerabilities, and industry best practices.
• Manage Linux patching and system hardening as part of security operations.

Skills Required:

• Proven experience in setting up and managing security frameworks and controls in cloud environments, especially AWS
• Web Application Security & API Security
• AWS Cloud Security & IAM Management
• Vulnerability Assessment & Penetration Testing (VAPT)
• Network Penetration Testing & Network Security
• Application Security (Secure Coding, Threat Modeling, DevSecOps)
• Security Tools Management & Optimization
• Security Audits, Risk Assessment & Compliance
• Linux Security & Patch Management

Education: