Security & Infrastructure Engineer

Security & Infrastructure Engineer

Role Summary:

We are seeking a hands-on Security & Infrastructure Engineer to strengthen the security of our applications, cloud environments, endpoints, and internal network infrastructure.This role will be responsible for VAPT, cloud security, RBAC, security reviews, customer audits, and security documentation, while ensuring a secure and scalable technology environment across AWS, Azure, devices, and networks.

Key ResponsibilitiesSecurity & VAPT

• Conduct Web Application and API VAPT assessments.
• Perform authentication and authorization testing.
• Validate remediation activities and perform retesting.
• Support secure code reviews and vulnerability management.
• Work with engineering teams to remediate security findings.

Cloud, Endpoint & Network Security

• Manage and improve AWS and Azure security posture.
• Administer IAM, RBAC, MFA, and access governance controls.
• Manage endpoint security, device compliance, patching, and hardening.
• Support network security including firewalls, VPNs, DNS, and access controls.

Security Governance & Customer Assurance

• Create and maintain security, cloud, network, and application architecture documentation.
• Document RBAC models, security standards, and procedures.
• Support customer security reviews, audits, questionnaires, and VAPT requirements.
• Prepare security reports and remediation summaries.

Required SkillsSecurity

• Web Application & API VAPT
• OWASP Top 10 & OWASP API Top 10
• Authentication & Authorization Testing
• Vulnerability Management
• Secure Code Review Fundamentals

Cloud & Infrastructure

• AWS Security
• Azure Security
• IAM / RBAC
• Microsoft 365 & Entra ID
• Endpoint Management
• Network Security
• Linux & Windows Administration

Tools

• Burp Suite Pro
• Nessus
• Nmap
• Postman
• Microsoft Intune
• SonarQube / Synk

Documentation

• Architecture Documentation
• RBAC Documentation
• Security Standards & Procedures

Experience

• 35 years of experience in Security Engineering, VAPT, Cloud Security, Infrastructure Security, or a related field.
• Hands-on experience with Web and API security testing.
• Experience with AWS and/or Azure environments.

Success Measures

• No Critical or High vulnerabilities in customer-facing security assessments.
• Timely remediation and validation of security findings.
• Secure and well-managed cloud, endpoint, and network environments.
• Successful completion of customer security reviews and audits.