Senior Cloud & Application Security Engineer

Position Overview

We are seeking an experienced Senior Cloud & Application Security Engineer to join our Cybersecurity team. In this role, you will play a critical part in protecting our cloud infrastructure, network architectures, and software applications. You will be responsible for end-to-end application security testing, threat detection, network-level troubleshooting, and cloud security governance across AWS and multi-cloud environments.

Required Qualifications & Technical Skills

• Application Security: Hands-on experience with Veracode (SAST/DAST/SCA), Qualys TotalAppSec, Burp Suite, ZAP, Nessus, OpenVAS, and Nmap.
• AWS Security Infrastructure: Deep understanding of AWS networking/security services (VPC, Site-to-Site VPN, GuardDuty, Macie, Config, SecurityHub, Inspector, IAM, S3, KMS, Secrets Manager, Certificate Manager).
• Network & Packet Troubleshooting: Expertise in network components (NAT, Bastion, Security Groups, ACLs, CloudTrail) and deep packet analysis via Wireshark / tcpdump.
• WAF & Edge Security: Expertise with AWS WAF, Cloudflare WAF, Bot Management, and Rate Limiting.
• SecOps & Endpoint Security: Operational knowledge of SIEM, EDR, and Malware Protection configuration and threat monitoring.
• Automation: Proficiency in Python for security scripting, API integrations, and reporting.

Preferred Certifications

• AWS Certified Security Specialty (Highly Preferred)
• CompTIA Security+
• Certified Ethical Hacker (CEH)
• Equivalent certifications such as CISSP, OSCP, or GIAC (GSEC/GCIH) are a plus.

Candidate responsibilities

Key Responsibilities

Application & Software Security (AppSec)

• Implement, manage, and optimize Veracode platform capabilities, including SAST, DAST, and Software Composition Analysis (SCA).
• Conduct authenticated security scans using Qualys TotalAppSec, analyze detailed vulnerability reports, prioritize risks, and collaborate directly with engineering teams to guide remediation.
• Perform manual and automated application vulnerability analysis and penetration testing using tools such as Burp Suite, OWASP ZAP, Nessus, OpenVAS, and Nmap.
• Manage Edge and Layer 7 security using AWS WAF and Cloudflare WAF, defining and maintaining rate-limiting rules, bot management policies, and custom firewall configurations.

Cloud & Network Security Architecture

• Design, configure, and manage secure AWS network architectures involving VPCs, Security Groups, Network ACLs, NAT Gateways, Bastion Hosts, and Site-to-Site VPNs.
• Administer AWS security governance, monitoring, and compliance tooling, including Security Hub, GuardDuty, Macie, Config, Inspector, and CloudTrail.
• Implement and audit identity and data protection standards using AWS IAM, S3, KMS, Secrets Manager, and AWS Certificate Manager (ACM).
• Configure network-level logging, analyze network traffic, and troubleshoot complex routing or security issues.
• Perform dynamic packet analysis using Wireshark, tcpdump, and packet inspection tools to diagnose complex network/security anomalies.

Security Operations & Automation

• Maintain operational visibility into Malware Protection, SIEM, and Endpoint Detection and Response (EDR) platforms (configuration, monitoring, and incident investigation).
• Develop continuous automation scripts in Python to streamline repetitive security operations, automate report generation, and integrate security workflows.