Senior Security Engineer- 2

Your Company

• Pricing
• Support
  
  

Free Trial

Careers at 42Gears

Senior Security Engineer- 2

Full Time

Bengaluru, India

A clearer role summary, responsibilities, and application entry point are laid out below so this page feels like a destination, not a placeholder.

Role type

Full Time

Location

Bengaluru, India

Role Details

Relevant Experience: 4-6 years

We are looking for a skilled candidate for the position of senior Security Engineer

who is responsible for designing and implementing security solutions, conducting security assessments, and developing security architecture frameworks for 42Gears products and infrastructure. This role includes significant responsibility for designing and implementing secure cloud architectures across AWS, and GCP platforms. We are seeking a strategic and analytical professional with solid security architecture and infrastructure experience who possesses strong technical communication and problem-solving skills. The role requires the ability to work collaboratively with cross-functional teams in a dynamic environment.

Responsibilities

• Design and implement security architecture solutions aligned with business requirements
  
  

and industry best practices.

• Conduct security assessments and vulnerability analysis to identify and remediate gaps in
  
  

existing infrastructure.

• Develop comprehensive documentation, including threat models and architecture
  
  

diagrams, to standardize security across the organization.

• Collaborate with cross-functional teams to integrate security controls directly into the
  
  

software development lifecycle (SDLC).

• Evaluate and pilot emerging security technologies to maintain a proactive defense posture
  
  

against evolving threats.

• Mentor junior team members and lead security awareness initiatives to foster a culture of
  
  

collective responsibility.

• Architect secure cloud solutions that ensure continuous compliance with organizational
  
  

policies and cloud-native best practices.

• Perform cloud hardening by evaluating infrastructure configurations and implementing
  
  

rigorous security benchmarks.

• Oversee IAM strategies across multi-cloud environments (AWS/GCP) to enforce strict
  
  

least-privilege access and identity governance.

• Automate security guardrails through Infrastructure as Code (IaC) to ensure consistent
  
  

security deployment across all environments.

• Design centralized logging and monitoring frameworks to provide the visibility required
  
  

for effective threat detection and response.

• Integrate SAST, DAST, and SCA tools into CI/CD pipelines to automate the detection of
  
  

vulnerabilities in custom code and third-party libraries.

• Develop security blueprints for containerized environments (Kubernetes/Docker) covering
  
  

image signing, pod security, and runtime protection.

• Define Data Loss Prevention (DLP) architectures to monitor and control the movement of
  
  

sensitive data across cloud and hybrid environments.

• Map technical security controls to regulatory frameworks (SOC2, ISO 27001, GDPR) to
  
  

ensure the architecture meets audit requirements.

Critical Skills/ Competencies

• Security Frameworks: Proficient in NIST CSF, ISO 27001, and SOC2 control mapping.
• Cloud Architecture: Security design knowledge for AWS (EC2, S3, VPC, Lambda, IAM),
  
  

Azure (VMs, KMS,Storage, App Services), and GCP (Compute Engine, Cloud Storage,

Identity Management) environments.

• Threat Modeling: Expert in STRIDE/PASTA methodologies and infrastructure risk
  
  

assessment.

• Identity & Access: Advanced IAM governance, Zero Trust architecture, and JIT access.
• Container Security: Hardening and orchestration security for Docker and Kubernetes.
• DevSecOps: Integrating SAST/DAST/SCA gating into automated CI/CD pipelines.
• Network Security: Implementing micro-segmentation, WAF, and API Security Gateways.
• Data Protection: Centralized secrets management (Vault) and PKI/Encryption standards.
• Security Observability: Architecting SIEM/SOAR telemetry for high-fidelity detection.
• Application Security: Deep knowledge of OWASP Top 10 and secure coding practices.
• Compliance: Technical auditing against FedRAMP, HIPAA,PCI-DSS standards cloud
  
  

security assessment methodologies.

In addition, preference will be given to candidates who possess any of the following certifications:

• CISSP (Certified Information Systems Security Professional) or similar advanced security
  
  

certification

• CISM (Certified Information Security Manager) or GIAC Security Essentials (GSEC)
• Cloud architect certifications such as AWS Solutions Architect Professional, Azure Solutions
  
  

Architect Expert, or Google Cloud Professional Cloud Architect.

• Kubernetes security certifications (CKA, CKAD) or cloud-native security certifications.
• Experience with enterprise security frameworks and governance standards (NIST, ISO
  
  

27001, SOC 2)

Required Skills

• Cloud Security and Compliance
• Compliance
• Code Quality and Architecture
• Cyber Threat Awareness
• Collaboration & Communication
  
  

Ready to apply

Keep this role in view and open the application form when you're ready.