Roles and Responsibilities

- Conduct penetration testing and vulnerability assessments on web applications, APIs, and cloud platforms (AWS, GCP, etc.) to identify vulnerabilities and potential attack vectors.

- Identify security design gaps in new and existing cloud architectures and collaborate with cross-functional teams to design effective mitigation strategies.

- Perform cloud security assessments, evaluating security controls and deployment models on various cloud platforms.

- Lead and oversee the security team to ensure high-quality deliverables for clients.

- Document findings, methodologies, and exploitation techniques in clear, actionable reports for both technical and non-technical stakeholders.

- Lead incident response efforts in the event of security breaches or incidents.

- Provide guidance, training, and mentorship to junior team members.

- Perform threat modeling for cloud-based scenarios and apply principles to enhance platform security.

- Plan and execute social engineering assessments to evaluate susceptibility to phishing, pretexting, and other manipulation techniques.

- Demonstrate a deep understanding of cloud security concepts and best practices, advising clients on securing their environments effectively.

- Define and develop build and release best practices, collaborating with teams to promote secure development and deployment.

- Work with teams to implement security controls, defenses, and countermeasures to prevent internal or external attacks on cloud environments.

- Stay current with developments in AppSec and CloudSec,



researching emerging threats, attack vectors, and vulnerabilities in cloud and web technologies.

‍

Technical Expertise

- Education: Bachelor’s Degree in Computer Science.

- Experience: 4+ years as a Penetration Testing Expert.

- 3+ years of hands-on experience in cloud security architecture (AWS & GCP), including native tools and best practices.

- Experience in planning and executing penetration tests/red team exercises for web applications, APIs, containers, and cloud platforms.

- Proficiency in creating exploits and PenTest scripts.

- Strong understanding of testing frameworks such as PTES and OWASP; expertise in OWASP Top 10 is essential.

- Familiarity with industry-standard security practices (OWASP, SANS) and compliance frameworks such as ISO 27001, SOC 2, HIPAA, etc.

- Proficiency in using tools like Burp Suite, Metasploit, Nessus, Wireshark, nmap, etc.

- Knowledge of security for containers, hands-on experience with DevSecOps principles, and end-to-end secure development processes.

- Relevant experience in DevOps and cloud migration.

- Excellent communication skills.

- Solid critical thinking and problem-solving abilities.

Good to Have Certifications:

- Offensive Security Certified Professional (OSCP)
- GIAC Certified Penetration Tester (GPEN)
- eLearn Security Web Application Penetration Tester eXtreme (eWPTX)
- CREST Registered Penetration Tester (CRT)
- AWS Certified Security – Specialty
- Google Cloud – Professional Cloud Security Engineer (PCSE)
- Certified Cloud Security Professional (CCSP)

📌 Sr Security Engineer (Bengaluru)
🏢 Ankercloud Technologies
📍 Bengaluru