India GSO ProdSec - STA 171536

Experience Level: 8+ years in Cybersecurity

Summary

The Security Engineer is responsible for maintaining, validating, and enhancing the security of applications, cloud environments, and emerging technology platforms. This hands-on role requires expertise in security architecture, cloud security, penetration testing, secure software development, and GenAI technologies. The candidate will leverage security expertise and automation skills to implement effective security controls and support the secure adoption of modern technologies, including frontier AI models.

Key Responsibilities

Review and assess security architectures for web applications, mobile applications, thick-client applications, connected devices, and GenAI-enabled solutions

Evaluate the security posture of products built and deployed across cloud environments.

Conduct penetration testing, vulnerability assessments, and security reviews to identify and remediate security weaknesses.

Assess security risks associated with applications leveraging Generative AI (GenAI) and recommend appropriate security controls.

Develop and maintain security automation tools using Python and shell scripting.

Leverage GenAI capabilities to enhance security operations and assessments.

Stay current on evolving security threats, cloud technologies, frontier models, and AI security trends to continuously improve security capabilities.

Manage a team of pentesters if required and drive application security assessments.

Bachelors degree in Engineering/Technology in Computer Science or related branch.

Strong knowledge of security architecture principles and best practices.

Good understanding of cloud technologies and cloud security across major cloud platforms.

Hands-on experience conducting penetration testing and vulnerability assessments.

Experience performing security assessments using frontier AI models is an added advantage.

Development experience in Python and shell scripting for automation, tooling.

Knowledge of application security, secure coding practices, and software development lifecycles.

Familiarity with threat modeling, risk assessment, and security testing methodologies.

Strong analytical, problem-solving, and communication skills.