Lead Security Engineer Cloud & Application Security

Hiring: Lead Security Engineer – Cloud & Application Security

Experience: 6–8 years

Salary: 26 LPA - 28 LPA

Location: Greater Noida West

Work Mode: Hybrid

Employment Type: Full-time

About the Role

We are looking for a hands-on Lead Security Engineer specializing in Cloud Security and Application Security to design, implement, and strengthen security across cloud infrastructure, web applications, and APIs.

The ideal candidate should have strong technical expertise in AWS security, application security architecture, authentication and authorization, and secure software development. This role is suited to an experienced security engineer who can independently make technical security decisions and guide secure architecture—not a general cybersecurity or security operations professional.

Key Responsibilities

• Design and implement security architecture for cloud infrastructure, web applications, and APIs.
• Secure AWS environments using IAM, KMS, Service Control Policies (SCPs), VPC security, CloudTrail, GuardDuty, and Security Hub.
• Identify and address application security vulnerabilities through secure code reviews, threat modelling, and application security assessments.
• Implement and evaluate authentication and authorization mechanisms using OAuth 2.0, OpenID Connect (OIDC), and JWT.
• Strengthen API security, access controls, and tenant isolation in multi-tenant applications.
• Integrate security practices into CI/CD pipelines and the software development lifecycle.
• Lead security design reviews and work closely with engineering and development teams to resolve security risks.
• Take ownership of production security architecture decisions and drive security improvements from design through implementation.

Required Skills and Qualifications

• 6–8 years of relevant hands-on experience in security engineering, with substantial experience in both application security and cloud security.
• Strong practical experience with AWS security architecture and controls, including IAM, KMS, SCPs, VPC, CloudTrail, GuardDuty, and Security Hub.
• Hands-on application security experience involving web applications, APIs, secure code reviews, and vulnerability remediation.
• Strong understanding of OAuth 2.0, OIDC, JWT, authentication, authorization, and access-control vulnerabilities.
• Experience securing JavaScript/TypeScript-based applications or APIs.
• Understanding of multi-tenant application security and tenant-level data isolation.
• Proven ability to design security controls and take ownership of production security architecture.
• Experience collaborating directly with software engineers and cloud/platform teams to implement security solutions.

Preferred Qualifications

• Experience with DevSecOps and integrating security tools into CI/CD pipelines.
• Knowledge of threat modelling, secure software development practices, and application security testing.
• Relevant cloud security or application security certifications are an advantage.

Who Should Apply

Candidates with a strong background in Cloud Security Engineering + Application Security Engineering, hands-on technical implementation, and security architecture ownership.

Please note: This is not a general cybersecurity, SOC, SIEM monitoring, penetration-testing-only, GRC, compliance, or IT security operations role. Candidates whose experience is primarily in these areas without hands-on cloud and application security engineering experience may not be a suitable fit.

Candidates with 6–8 years of relevant experience who are comfortable working in a hybrid setup in Greater Noida West are encouraged to apply.

Interested candidate can share their resume: [HIDDEN TEXT]