Engineer / Sr. Engineer - Cyber / Cloud Secrurity

Key Responsibilities:

• Perform in-depth penetration testing, vulnerability assessments, and security reviews of applications, infrastructure, and networks.
• Identify, exploit, and document security vulnerabilities across systems and provide remediation recommendations.
• Simulate sophisticated attacks to test the strength of security controls and identify potential areas of compromise.
• Collaborate with development, infra, and DevOps teams to integrate security into the development lifecycle and Infrastructure-as-Code (IaC) security.
• Develop comprehensive security test plans, methodologies, and tools to ensure effective assessment of systems.
• Create detailed reports that outline vulnerabilities, risks, and recommended mitigations.
• Perform threat modeling and risk assessments to prioritize testing efforts.
• Monitor network traffic for threats and respond to security incidents.
• Ensure security best practices in Cloud environments, security controls for cloud workloads, IAM policies, and network security.
• Monitor and respond to cloud security incidents using SIEM and cloud-native security tools.
• Integrate and automate security testing and compliance checks into CI/CD pipelines using tools like SAST, DAST, and IAST.

Required Skills & Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 2-3 years of experience in cybersecurity with a focus on Penetration testing or Ethical Hacking, Application Security, Cloud Security, and Dev Sec Ops.
• Experience with security tools such as Burp Suite, Metasploit, Nessus, Wireshark, Sonar Qube, AWS WAF, Google WAF, Kali Linux, and other vulnerability scanning tools, etc.
• Knowledge of SIEM, EDR,  NIST, CIS, and OWASP security frameworks.
• Proficiency in scripting (Python, Bash, PowerShell) for security automation.
• Industry certifications like CEH, Security+, AWS/GCP Security, or any Dev Sec Ops-related certification (preferred but not mandatory).
• Excellent written and verbal communication skills to effectively report vulnerabilities and collaborate with stakeholders.