{"id":2201193,"url":"https://alion.io/job/photon-security-engineer-gcp-awsazure-chennai","title":"Security Engineer - GCP, AWS,Azure - Chennai","company":{"id":3186451,"name":"Photon","domain":"photon.com","url":"https://alion.io/company/photon-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"D","score":45,"open_postings":598,"ghost_share":0.913,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2024-06-18T17:47:19Z","employer_posted_date":"2024-06-18","last_verified_at":"2026-10-21T18:28:18Z","board_verified":true,"closed_at":null,"days_open":855,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":854},"description":"Job description\nWe are seeking a highly skilled and experienced Software Security Lead to join the web and mobile application development and engineering team for a leading name in the food and beverage market with 500+ stores worldwide. This person will play a crucial role in ensuring that the software and development processes adhere to those industry security standards and those defined by the company. The role requires a blend of both hands-on technical expertise in vulnerability assessment and penetration testing, as well as experience in defining and implementing new security controls and processes and ensuring that cross-functional team members are fully aware of these processes and how to comply with them.\nKey Responsibilities\nPerform periodic vulnerability assessments across web and mobile applications; define the scope, prepare a test plan with timelines, create test cases for business logic testing, and obtain sign-off for deliverables. \nAssist with scoping, co-ordination and operation of routine third-party penetration testing activities.\nValidate and prepare vulnerability assessment and penetration testing results for remediation, ensuring the development team are aware of their significance.\nManage the remediation of security vulnerabilities with the relevant development teams, following through from notification and support to completion.\nPrepare development teams for annual PCI-DSS audit, collecting relevant documentation and evidence as necessary\nProvide training sessions and workshops to educate cross-functional development teams on security standards and processes that must be followed.\nEstablish and maintain security processes throughout the software development lifecycle, and ensure that these are well implemented into DevOps security practices and CI/CD pipelines. \nAssist with development and implementation of new security controls to protect software systems from threats.\nLead the response to any security incidents that may arise within the software development environment.\nRequirements\nBachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or a related field\nHaving a certification background in any one of GCIH, GCIA, GPEN, OSCP or other relevant certifications within Cyber Security is highly advantageous.\nSeveral years of experience in software security and experience of securing cloud-based services/environments (GCP, AWS, Azure), technologies, and providers (e.g. SaaS, IaaS, PaaS) that expand at a rapid scale.\nDemonstrated experience using a variety of security tools and processes to perform vulnerability assessments such as Nmap, Metasploit, Kali Linux, Burp Suite. \nAbility to perform vulnerability assessments against iOS and Android applications and when new product designs are implemented. Experience in iOS and Android development is advantageous.\nMust have knowledge of detecting attacks through jailbreaking, resource encryption, check-summing, debugger detection, swizzle detection, hook detection and other means.\nExperience identifying application attack vectors and strong knowledge of common vulnerabilities (e.g. OWASP Top 10).\nStrong understanding of defending applications against compromise via a range of techniques including advanced obfuscation, pre-damage, string encryption, symbol stripping, renaming, debug Info, call hiding.\nProficiency with security tools and technologies such as web application firewalls, intrusion detection systems, encryption and vulnerability scanning tools\nGood understanding of security operations, network security, threat intelligence, and incident response.\nStrong technical knowledge across a range of server and gateway platforms, including Linux/ Unix/Windows/ Mac\nDemonstrable knowledge and experience of scripting/programming tools such as PowerShell, Python, SQL.\nAbility to perform analysis of log files from multiple devices and environments and identify indicators of security threats. Strong understanding of parsing and analyzing web, system and security logs is desired.\nFamiliarity with security frameworks and standards (e.g. NIST, ISO 27001, OWASP and PCI DSS)\nExperience in defining and implementing security controls and processes, ideally within application and software development. Experience in proactive issue detection, tool creation, development of best practices and procedures and policy development.\nExcellent verbal and written communication skills; able to explain the significance of technical vulnerability assessment and penetration testing findings to non-security team members; experience in documenting new process and policies.\nAbility to offer security guidance to product teams as they build new mobile products and features.\nMust be able to effectively work with and interact with teams of various backgrounds and maintain positive relationships; be able to work in a collaborative team environment.","description_format":"text","description_chars":4898,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-09T21:13:08Z"}],"visa":[],"liveness":{"score":2,"band":"cold","label":"Long shot","p_open":1,"p_active":0.066,"p_room":0.28,"age_days":854,"expected_fill_days":19,"reasons":["conf:3","stale_co","velocity","ghost","win:tail","crowd:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/photon-security-engineer-gcp-awsazure-chennai","json_url":"https://alion.io/job/photon-security-engineer-gcp-awsazure-chennai.json","meta":{"generated_at":"2026-10-21T22:16:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31670,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3186451},"rest":"https://alion.io/mcp/rest/get_company?id=3186451"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fphoton-security-engineer-gcp-awsazure-chennai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fphoton-security-engineer-gcp-awsazure-chennai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fphoton-security-engineer-gcp-awsazure-chennai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/photon-security-engineer-gcp-awsazure-chennai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fphoton-security-engineer-gcp-awsazure-chennai"}]}