Security Engineer

We are seeking a skilled and proactive Security Engineer to enhance the security posture of enterprise platforms and infrastructure for our clients. The ideal candidate will collaborate closely with DevOps and development teams to secure enterprise applications, including GRC and ERP systems hosted on client environments. This role involves infrastructure hardening, vulnerability assessments, penetration testing, security architecture reviews, compliance documentation, and implementing security best practices across Linux systems, containers, Kubernetes, databases, and web applications. This position is available on both full-time and contract terms, with work performed on-site.

Key Responsibilities

- Harden Linux servers, Docker containers, Kubernetes clusters, databases, and web servers following CIS Benchmarks and vendor security guidelines.
- Configure and verify secure protocols and application settings such as TLS 1.2+, HSTS, secure cookies, session management, account lockout, and password policies.
- Perform vulnerability assessments and penetration testing on web applications, APIs, servers, and infrastructure components.
- Identify, classify, document, and track security vulnerabilities through to remediation.
- Design and review identity and access management controls including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), privileged access, and audit logging.
- Integrate application and infrastructure logs with client Security Information and Event Management (SIEM) platforms.
- Review backup strategies, disaster recovery plans, encryption methods, and key management practices.
- Develop and maintain security documentation such as architecture diagrams, incident response plans, business continuity plans, disaster recovery plans, and cybersecurity compliance statements.
- Complete client security questionnaires and assist with tender submissions and security audits.
- Incorporate security checks into CI/CD pipelines, including dependency scanning, container image scanning, and static application security testing.
- Participate in incident response activities and prepare detailed post-incident reports.

Required Qualifications

Education
- Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field.

Professional Experience
- 4 to 6 years of hands-on experience in Security Engineering.
- Proven experience in vulnerability assessment and penetration testing.

Certifications
- At least one relevant certification such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), CompTIA Security+, GIAC certifications, or CISSP/CISM (especially for senior roles).

Security Standards & Frameworks
- Familiarity with ISO/IEC 27001, NIST Cybersecurity Framework or NIST SP 800-53, OWASP Top 10, and CIS Security Benchmarks.

Technical Skills
- Expertise in Linux administration, server security, and hardening.
- Experience securing Docker and Kubernetes environments.
- Proficiency in web application and API penetration testing using tools like Burp Suite.
- Skilled in vulnerability scanning with Nessus, OpenVAS, Qualys, or similar tools.
- Knowledge of network security concepts, reverse proxies, Web Application Firewalls (WAF), TLS, and firewall configurations.
- Database security experience with PostgreSQL and MySQL, including encryption.
- Ability to automate security tasks using Python or Bash scripting.
- Experience with logging, monitoring, syslog, SIEM integration, and security alerting.
- Understanding of identity and access management technologies such as SAML, OIDC, Microsoft Entra ID, Active Directory, and MFA.

Preferred Qualifications and Benefits

- Experience securing PHP or Python-based web applications.
- Cloud security knowledge with AWS, Microsoft Azure, or Google Cloud Platform.
- Familiarity with ISO 27001 audit support and enterprise tender security submissions.
- Experience with backup and recovery solutions like Veeam.
- Strong written and verbal communication skills, with the ability to explain technical security risks to non-technical stakeholders.
- Excellent documentation and analytical abilities.
- Ability to work independently and meet project and tender deadlines.
- High professional ethics and commitment to client confidentiality.

Compensation
Monthly pay ranges from Rs100,000 to Rs300,000.

Work Location
This role requires in-person attendance at the client site.