AWS & Application Security Engineer

AWS & Application Security Engineer Experience: 5+ Years

Location: Pune,India

Job Role Pointers:

• Conduct security assessments, VAPT, and penetration testing of web applications, mobile applications, AWS infrastructure, and networks.
• Perform security reviews of AWS accounts, VPCs, EC2 instances, EKS clusters, RDS databases, S3 buckets, Load Balancers, and serverless services.
• Implement and manage AWS security services such as GuardDuty, Security Hub, AWS Config, Inspector, CloudTrail, WAF, Shield, and IAM.
• Conduct regular cloud security posture assessments and identify misconfigurations against AWS security best practices and CIS benchmarks.
• Identify security vulnerabilities, misconfigurations, and compliance gaps, and drive remediation efforts.
• Hands-on experience with Ansible Automation for server provisioning, configuration management, security hardening, patch management, and compliance enforcement.
• Develop and maintain Ansible playbooks for automating security controls, vulnerability remediation, user access management, and AWS infrastructure deployments.
• Perform and support internal/external security audits and compliance assessments.
• Prepare security test cases, audit checklists, VAPT reports, and risk assessment reports.
• Coordinate with engineering and infrastructure teams to remediate findings within defined timelines.
• Implement OWASP security best practices and support secure SDLC initiatives.
• Perform Linux server hardening and infrastructure security reviews.
• Support firewall, network security, cloud security monitoring, and incident response activities.

Required Skills

• Strong hands-on experience in AWS Security, Application Security, and VAPT.
• Hands-on experience with AWS Security Hub, GuardDuty, Inspector, CloudTrail, Config, WAF, Shield, Secrets Manager, and KMS.
• Experience securing containerized environments such as Docker and Kubernetes
• Expertise with tools such as Burp Suite Pro, Nessus, Qualys, Acunetix, Netsparker, Metasploit, WebInspect, and Nmap.
• Experience with OWASP Top 10, secure coding practices, and cloud security controls.
• Good understanding of Linux administration, server hardening, and network security.
• Experience participating in at least two security audits, with one conducted in the last 12 months.
• Excellent analytical, documentation, and communication skills.

Preferred

• Experience in SaaS, e-commerce, or product-based organizations.
• Certifications such as AWS Security Specialty, CISM, or ISO 27001 Lead Auditor.

Benefits

Why Join Anchanto

At Anchanto, we believe in creating an environment where people can build meaningful careers, continuously develop their capabilities and gain exposure to a truly global business.

• Global Exposure: Work with diverse teams, customers and stakeholders across international markets and gain experience in a global B2B SaaS environment.
• Learning & Development: We invest in our people through sponsored learning, certifications and development opportunities aligned with your professional growth.
• International & Onsite Opportunities: Client-facing roles may offer opportunities to travel and work onsite with customers across our global markets.
• Medical Insurance: Comprehensive medical insurance coverage to support you & Your Family's health and well-being.
• Comprehensive Leave Benefits: Maternity, Paternity, Marriage and Bereavement leave, along with Comp Off and flexibility to support important personal commitments.
• Recognition for Long-Term Contribution: Tenured employees are eligible for additional monetary benefits, extra paid leave and company-sponsored paid vacations as part of our commitment to recognizing long-term contribution.
• Flexibility & Work-Life Balance: A supportive and flexible work environment that enables employees to manage professional responsibilities alongside personal priorities.
• Meaningful Career Growth: Take ownership of challenging, high-impact work and contribute to products and solutions that serve global brands, retailers and logistics businesses.