Lead Security Engineer

Job Summary

Job Title: Security Engineer

Location: Pune / Chennai (Hybrid – 3 days/week from client office)

About the Role

We are seeking an experienced Security Engineer at a Lead/Architect level to drive enterprise wide security engineering and DevSecOps initiatives.

The role involves designing and implementing robust security solutions across cloud, application, and infrastructure layers while ensuring alignment with business and regulatory requirements.

Key Responsibilities

• Collaborate with stakeholders to define, design, and implement enterprise security requirements
• Conduct risk assessments and drive remediation and mitigation strategies
• Architect and implement security controls across applications, cloud environments, and infrastructure
• Establish and enhance DevSecOps practices and secure SDLC integration
• Monitor and validate security controls across systems through continuous testing and assessment
• Lead cybersecurity awareness initiatives and promote secure engineering practices
• Manage and coordinate response to complex security incidents across multiple teams
• Stay updated on emerging threats and drive adoption of modern security tools and frameworks

Requirements

Mandatory Skills & Experience

• Strong understanding of security vulnerabilities, including CVEs, CWEs, and exploit patterns
• Hands-on experience with SAST, SCA, and DAST tools
• Proficiency in Java and scripting languages (Python/Shell)
• Experience with AWS/Azure/GCP and CI/CD pipelines
• Strong knowledge of cloud security (IAM, VPC, encryption, security groups, network controls)
• Solid understanding of REST APIs, HTTP authentication mechanisms, and GraphQL security
• Experience in Linux environments and automation pipelines
• Strong exposure to DevSecOps practices and secure engineering frameworks
• Experience with version control systems (Git, GitHub, Bitbucket)

Good to Have Skills

• Experience in financial services or highly regulated industries
• Strong stakeholder engagement and mentoring experience
• Exposure to large-scale security transformation programs
• Knowledge of enterprise security frameworks and governance models
• Experience implementing DevSecOps at scale

Preferred Candidate Profile

• Proven experience operating at a Lead or Architect level in enterprise environments
• Strong analytical skills and ability to solve complex security challenges
• Ability to influence stakeholders and drive organisation-wide security adoption
• Comfortable working in hybrid model with regular presence at client office