Lead Security Engineer

We are looking for a Lead Security Engineer to drive end-to-end security across applications, cloud infrastructure, and DevOps pipelines. The ideal candidate should be a hands-on security expert with strong experience in cloud security, application security, and compliance frameworks, along with the ability to lead and mentor teams.

The core responsibilities for the job include the following:

Security Architecture and Strategy:

• Design and implement security architecture for cloud and application environments.
• Define security best practices, policies, and standards.
• Identify risks and ensure mitigation strategies are in place.

Application and DevSecOps Security:

• Implement secure coding practices and integrate security into CI/CD pipelines.
• Perform VAPT, SAST, DAST, and API security testing.
• Collaborate with engineering teams to fix vulnerabilities.

Cloud and Infrastructure Security:

• Secure cloud environments (AWS/Azure), including IAM, networking, and storage.
• Implement container and Kubernetes security best practices.
• Ensure infrastructure security and compliance.

Security Operations:

• Monitor systems using SIEM, EDR, WAF, and logging tools.
• Lead incident response, threat detection, and root cause analysis.
• Improve monitoring, alerting, and overall security posture.

Compliance and Governance:

• Ensure compliance with ISO 27001 SOC 2 PCI-DSS, and regulatory standards.
• Conduct security audits and risk assessments.
• Maintain security documentation and policies.

Leadership and Collaboration:

• Lead and mentor a team of security engineers.
• Work with cross-functional teams (DevOps, Engineering, Product).
• Drive security awareness and best practices across the organization.

Requirements:

• Strong experience in cybersecurity / Information Security.
• Hands-on expertise in Cloud Security (AWS/Azure).
• Experience in Application Security (VAPT, SAST, DAST, and API Security).
• Knowledge of DevSecOps practices and CI/CD security.
• Familiarity with SIEM, WAF, IDS/IPS, and EDR tools.
• Strong understanding of network security fundamentals.

Preferred Qualifications:

• Experience in product-based or SaaS environments.
• Certifications like CEH, CISSP, OSCP, AWS Security (good to have).
• Exposure to Kubernetes / container security.

What We're Looking For:

• Strong ownership mindset.
• Hands-on problem solver.
• Ability to lead from the front.
• Excellent communication and stakeholder management.